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Preface 


IBM® Workload Deployer provides a solution to creating, deploying, and managing workloads 
in an on-premise or private cloud. It is rich in features that allow you to quickly build and 
deploy virtual systems from base images, to extend those images, and to customize them for 
future use as repeatable deployable units. IBM Workload Deployer also provides an 
application-centric capability enabling rapid deployment of business applications. By using 
either of these deployment models, an organization can quickly instantiate a complete 
application platform for development, test, or production. 

The IBM Workload Deployer uses the concept of patterns to describe the logical configuration 
of both the physical and virtual assets that comprise a particular solution. The use of patterns 
allows an organization to construct a deployable solution one time, and then dispense the 
final product on demand. Virtual system patterns are composed of an operating system and 
IBM software solutions, such as IBM WebSphere® Application Server and IBM WebSphere 
Virtual Enterprise. Virtual application patterns are constructed to support a single application 
workload. The IBM Workload Deployer is shipped with a set of pre-loaded virtual images and 
virtual patterns. These images and patterns can be used as is to create comprehensive and 
flexible middleware solutions. They can also be cloned and customized to suit your 
specific needs. 

This IBM Redbooks® publication looks at two different aspects of customizing virtual systems 
for deployment into the cloud. First, it explores the capabilities of IBM Image Construction and 
Composition Tool to build and provide highly customized virtual images for use in virtual 
system patterns on the IBM Workload Deployer. Next, it looks at the virtual application 
capabilities of the IBM Workload Deployer, including those capabilities that allow you to 
deploy enterprise applications and database services to the cloud. It also introduces the IBM 
Workload Deployer Plugin Development Kit, which allows you to further extend the 
capabilities of the virtual application patterns. 


The team who wrote this book 

This book was produced by a team of specialists from around the world working at the 
International Technical Support Organization, Raleigh Center. 
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Part 1 


IBM Workload Deployer 


This part introduces the IBM Workload Deployer and the tools available with it to create 
customized virtual images and patterns. It provides an architectural overview and then shows 
the core setup of the appliance. 

This part contains the following chapters: 

► Chapter 1 , “IBM Workload Deployer overview” on page 3 

► Chapter 2, “Configuring the IBM Workload Deployer” on page 23 
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IBM Workload Deployer overview 


IBM Workload Deployer is one of the foundational elements of the IBM private cloud strategy. 
This appliance provides rapid adoption and deployment of both Infrastructure and Platform as 
Service offerings. It provides a proven path to better use existing IT resources by improving 
the efficiency and flexibility of these infrastructures. IBM Workload Deployer is the right 
solution for organizations seeking agility in response to a dynamic business environment. 

This chapter introduces the IBM Workload Deployer and its capabilities. In addition, it 
describes the primary tools available to create custom content to be provisioned and 
managed by the appliance. 

This chapter contains the following topics: 

► IBM Workload Deployer V3.1 

► IBM Workload Deployer patterns 

► The cloud 

► Administrative interfaces 

► Appliance settings 

► Tools for building custom assets 
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1 .1 IBM Workload Deployer V3.1 


IBM Workload Deployer provides a solution to creating, deploying, and managing workloads 
in an on-premise or private cloud. It is rich in features that allow you to quickly build and 
deploy virtual systems from base images, to extend those images, and to customize them for 
future use as repeatable deployable units. IBM Workload Deployer also provides an 
application-centric capability that provides rapid deployment of business applications. By 
using either of these deployment models, an organization can quickly instantiate a complete 
application platform for development, test, or production. 


1.1.1 Solution elements 

The IBM Workload Deployer provisions both standard and customized middleware virtual 
images and patterns to the cloud. These virtual images come from “Hypervisor Editions”, 
pre-loaded on the appliance to help organizations to develop, test, and deploy business 
applications easily and quickly. 

IBM Workload Deployer can receive and act upon operational data from the resource pools 
(IBM PowerVM®, IBM z/VM®, or VMware hypervisors) that make up the private cloud. It can 
also monitor application workload demand conditions and adjust resource allocation or 
prioritization as required to achieve established service level agreements. 

When the virtual environment is no longer needed, the resources are returned to the shared 
resource pool automatically for future use and are logged for internal charge-back purposes. 
The appliance manages individual user and group access to resources, providing IT 
managers with the control needed to optimize efficiency at a fine-grained level. 

IBM Workload Deployer integrates seamlessly with development and service management 
tools from IBM Rational and IBM Tivoli® for architectural, design, development, management, 
and monitoring purposes. 

Figure 1-1 shows the core components of an IBM Workload Deployer solution. 


Appliance: 

Hardware configuration 
Appliance management function 
Middleware virtual images 
Patterns and script packages 


Cloud: 


Hypervisors 

Networking 

Storage 


Users and 
groups 


OVF 

Images 


Patterns 
and scripts 



Web 2.0 UI, CLI, and REST APIs 


Virtual systems: 

Highly customized deployment 
Dispensed and run in cloud 
Intelligently managed and monitored 


Figure 1-1 IBM Workload Deployer core components 
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First, you have the physical appliance with its hardware configuration and management 
application firmware, pre-loaded and customizable middleware virtual images, configurable 
patterns, script packages, and administration interfaces. 

Next, you have the on-premise or private cloud environment on which the virtual systems and 
applications run. The cloud environment consists of the hypervisors, networking 
infrastructure, and storage devices that are allocated to the appliance. 

Finally, you have the instances of virtual systems and virtual applications that are deployed 
by the appliance into the cloud. These systems are dispensed into the cloud using the 
intelligent placement capabilities of IBM Workload Deployer, which guarantee efficient cloud 
resource usage coupled with high availability. 


1 .1 .2 The hardware 

IBM Workload Deployer is a 2U rack-mountable appliance based on the IBM DataPower® 
7199 / 9005 product family. This appliance offering provides several benefits: 

► Consumability 

After the initial setup of the appliance and accepting the user license agreement, the 
appliance console is immediately available. No extra installation steps are necessary, and 
you can start building private clouds in minutes. 

► Security 

IBM Workload Deployer manages a shared and multi-tenant environment, where isolation 
and security are of utmost importance. The secure nature of the appliance is rooted in a 
self-disabling switch, which is triggered if the appliance cover is removed. This physical 
security allows IBM Workload Deployer to serve as a secure vault for credentials, which 
can be tied to virtual images throughout their entire lifecycle (in storage, being dispensed, 
running in the cloud, or being removed from the cloud). 

► Storage 

IBM Workload Deployer contains a storage driver that streamlines the storage of image 
customizations. When an image is loaded on to the appliance, it is “shredded” into parts 
by the storage driver. When an image is later customized and reloaded on to the 
appliance, it is similarly shredded in a consistent and deterministic way. These collections 
of shredded images are then compared and only the new or modified ones are transmitted 
and stored. 

IBM Workload Deployer serves as a dedicated store for both the pre-loaded and 
customized middleware virtual images and patterns. The appliance includes advanced 
compression and storage techniques that allow a significant number of these sizeable 
virtual images to be stored. The appliance is backed up by the DataPower processing 
power that is needed to manage and provision these images to the cloud. 

► Cost 

The total cost of ownership (TCO) that is associated with a physical appliance is low. With 
a single appliance, the expensive process of building, customizing, provisioning, and 
managing systems and applications to a cloud is streamlined and simplified, reducing the 
cost of operations and the skill level required. Hardware costs are also lowered through 
better utilization of existing systems. Support costs are reduced through repeatable and 
consistent deployments. 
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1.1.3 What is new in IBM Workload Deployer Version 3.1 


IBM Workload Deployer V3.1 provides the following enhancements to Version 3.0: 

► Support for custom images created by the IBM Image Construction and Composition Tool 
for deployment into cloud environments. 

The IBM Image Construction and Composition Tool is designed to provide efficient reuse 
and management of images and software in a cloud environment. It provides the 
capability to build and share images that are customizable and easily managed. 

► Embedded IBM Workload Plugin Development Kit (PDK). 

IBM Workload Plugin Development Kit and detailed documentation is used by the 
developer to build custom virtual application plug-ins to extend virtual application patterns 
or create patterns, so that an administrator can import them and make available for 
other users. 

► High availability and failover of the IBM Workload Deployer appliance. 

In IBM Workload Deployer V3.1 , new active / passive failover capability is supported to 
use two IBM Workload Deployer appliances. One appliance is configured as the master 
while the second appliance as a slave. The slave has a replicated database and data so 
that it is ready to take over on failure of the master. Eventually, the administrator can 
restart replication between the two appliances where the slave becomes the master and a 
new appliance becomes the slave. 

► Support for broader programming models with IBM WebSphere Application Server 
Hypervisor Edition V8.0. 

These programming models include Enterprise Edition (Java EE) 6, Open Services 
Gateway initiative (OSGi) applications, Web 2.0 and Mobile, Java Batch, XML, Dynamic 
Scripting, Service Component Architecture (SCA), Communication Enabled Application 
(CEA), and Session Initiation Protocol (SIP). 

► Support for virtual applications running on IBM AIX®. 

There is support for deploying virtual applications on AIX, providing the flexibility for 
platform of choice and using the virtualization benefits offered by IBM PowerVM 
technology using IBM Power Systems™. 

► Security enhancements. 

To prevent the abuse of a single and all-powerful user account, such as cbadmin, IBM 
Workload Deployer V3.1 separates administration, auditing, and operation responsibilities 
and their associated privileges. Each role is defined for responsibilities, such as auditing, 
hardware administration, software administration, and operations. 


1.2 IBM Workload Deployer patterns 

IBM Workload Deployer bases its ability to provision virtual systems, applications, and 
databases to the cloud on the concept of patterns. Patterns are logical descriptions of both 
the physical and virtual assets that comprise a particular solution. The use of patterns allows 
an organization to construct an individual element or integrated solution one time, and then 
dispense the final product on demand. 
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IBM Workload Deployer provides two types of patterns to assist with the rapid deployment 
and integration of private cloud capabilities: virtual system and virtual application patterns. 
The appliance ships with preinstalled patterns of each type that represent varying degrees of 
automation and customization and are optimized with the most appropriate configurations 
and settings for the solutions that they support. The preinstalled patterns are based on 
industry-recommended practices. 

You can also create your own patterns using a supplied pattern as a template, or create a 
pattern from scratch. After a pattern is created on the appliance, the pattern can be reused 
over and over to create multiple identical instances in the cloud. Custom patterns are stored 
on the appliance and can be reused as needed to ensure consistent and repeatable 
deployment environments. 


1 .2.1 Virtual system patterns 

Virtual system patterns represent repeatable topology definitions based on various 
middleware virtual images and runtime configurations. Virtual system patterns provide 
flexibility and control over the middleware topology to be deployed. 

A virtual system pattern typically consists of an operating system and additional IBM software 
solutions. An example of a virtual system pattern is one that contains Linux operating 
systems with WebSphere Application Server installed. The pattern might include a 
deployment manager, several custom nodes, a DB2 database, and an IBM HTTP Server. 

Using a virtual system pattern gives you more control over the middleware topology but also 
requires that you configure the middleware. Script packages can be added to the pattern to 
automate the customization of the virtual system topology after it is up and running. For 
example, to create WebSphere resources and to install an application. 

These concepts are illustrated in Figure 1-2. 



When a virtual system pattern is deployed, the appliance creates the topology, builds the 
relationships between the components (for example, federating the custom nodes to the 
deployment manager), and configures the middleware based on the script packages you 
provide. System administrators can log in to the system to perform additional customization. 
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1.2.2 Virtual application patterns 


While virtual system patterns focus on the topology, virtual application patterns (as the name 
implies) take an application-centric approach. With virtual system patterns, you describe a 
middleware topology and IBM Workload Deployer builds that topology in the cloud. With 
virtual application patterns, you describe an application and IBM Workload Deployer builds 
the appropriate infrastructure and deploys the application to it. IBM Workload Deployer 
includes a set of pre-loaded web application and database patterns. You can also create your 
own patterns, from scratch or by using a supplied pattern as a template. 

Virtual application patterns are highly optimized and are constructed solely for supporting a 
singular workload. This pattern requires the least amount of customization during deployment 
and provides the most direct method for obtaining a rapid return on investment. Virtual 
application patterns are application-centric. You provide the application files and describe the 
characteristics of how the application should be run and managed using policies. The 
appliance generates the middleware topology to meet your requirements, as shown in 
Figure 1-3. 



Figure 1-3 Virtual application patterns provisioned as virtual applications 


The IBM Database Patterns allow you to create and deploy DB2 databases in a 
Database-as-a-Service (DBaaS) cloud environment. With these patterns, you select the 
database requirements that meet your needs and IBM Workload Deployer builds the 
underlying topology to meet these requirements. 

You can define the requirements by selecting a database workload standard. These 
standards allow you to choose from a predefined set of database configurations. The 
Departmental Transactional workload standard is appropriate for online transaction 
processing and is optimized for transactional applications. The data mart standard is primarily 
used for data warehousing and is optimized for reporting applications. Alternatively, you can 
choose to clone an existing database as a model. 

When a workload standard is selected, a set of scripts runs to tune the operating system and 
instance configuration, create the database and accompanying objects, and load the 
initial data. 
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1 .2.3 Pattern elements 


You construct patterns by combining one or more elements together, and then performing a 
degree of integration. The integration activities can be as simple as standardizing the default 
location for software installation or as complex as automatic node federation within a 
WebSphere cell. 

Figure 1-4 provides a high-level view of the elements that can be used to construct patterns 
and the characteristics that define them. 


Virtual Systems 


Images 

• Basic execution services for 
standalone VM images 

• Complete control over image 
contents 

• Basic image management/ 
library functions 

• IBM provided product images 

• Ability to create custom 
images 

• Leverages IBM image 
management tools 


Topologies 

• IBM defined product images 
and patterns for common 
topologies 

• Ability to create custom 
patterns 

• Traditional configuration and 
administration model 

• Aligned around existing 
products 

• Automated provisioning of 
images into patterns 


Virtual Applications 


Workloads 

• Application awareness 

• Fully integrated software 
stacks 

• IBM defined topologies 

• Simplified interaction model 

• Highly standardized and 
automated 

• Integrated middleware with 
cloud capabilities 

• Integrated lifecycle 
management 


Figure 1-4 Pattern elements 


Virtual image: Hypervisor editions 

Virtual images are hypervisor edition images that provide the operating system and product 
binary files that are required to create a virtual system instance. IBM Workload Deployer 
supports a number of middleware Hypervisor Edition images, in the application infrastructure, 
business process management, connectivity, database, and portal arenas that are 
immediately available for use as is or can be customized to add extra functionality. 

The appliance uses these virtual images to create and deploy virtual machines into the cloud. 
The virtual images follow the Open Virtualization format (OVF) specification, which is an 
industry standard specification for packaging and distributing virtual appliances that contain 
one or more virtual machines. Using OVF provides a standard mechanism to communicate 
virtual machine resource requirements to several hypervisors. 

IBM Workload Deployer ships with a set of virtual images that includes: 

► IBM WebSphere Application Server Hypervisor Edition virtual images for VMware ESX, 
IBM PowerVM, and IBM z/VM hypervisor technologies. This set of images also includes 
those images with the Intelligent Management Pack, which provides dynamic runtime 
capabilities similar to the capabilities that are present in WebSphere Virtual Enterprise. 

► IBM Workload Deployer Image for x86 Systems for workload patterns. 

► IBM operating system images for AIX. 

► WebSphere MQ Hypervisor Edition virtual machine images. 

► WebSphere Message Broker Hypervisor Edition virtual machine images. 

► DB2 Enterprise and Express Hypervisor Edition virtual images. 

► WebSphere Portal Hypervisor Edition virtual images. 
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In addition to this list, you can add your own custom virtual images. You can clone an existing 
image, deploy it to the cloud, update it, and recapture the new image. You can also create 
new virtual images based on your own operating systems using the IBM Image Construction 
and Composition Tool. 

Figure 1-5 shows a snapshot of the Virtual Images catalog in the IBM Workload Deployer 
user interface. Selecting a hypervisor edition displays the characteristics. Some images 
provide the core operating system used in virtual application patterns. Others provide the 
core operating system and additional products and “parts” for use in virtual system patterns. 

Patterns are associated with a specific image, supplying the parts that can be used in the 
pattern. In Figure 1-5, you can see the parts included in the WebSphere Application Server 
V8 Hypervisor Edition, for example, custom nodes, a deployment manager, and other 
elements required to build a topology. These parts can be selected by the pattern builder 
during the creation of virtual system patterns. 



Figure 1-5 Virtual images 

Topologies 

Virtual system patterns provide the topology for the virtual system to be provisioned to the 
cloud, for example, a web server, WebSphere Application Server deployment manager and 
custom nodes, and a database. The topology is created from the parts available in the 
images, plus optional customization scripts that provide configuration after deployment, for 
example, the configuration of WebSphere Application Server for an application workload and 
the installation of the application. The ability to integrate standard aspects of high availability 
and fault tolerance are contained within the topology. 
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Figure 1-6 shows a virtual system pattern topology in the Pattern Editor. Parts, shown on the 
left, can be added to the topology on the right. Each part becomes a virtual system at 
deployment. Script packages, for example, the Installation DB2 drivers script package, are 
added to parts in the topology for execution at deployment. Add-ons can also be used in the 
pattern to customize a virtual machine, for example, to increase the disk size of the virtual 
machine or add a user. Multiple instances of a part can be defined, for example, the 2 in the 
upper left corner of the custom node in Figure 1-6 indicates that two custom nodes should 
be deployed. 
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Figure 1-6 Virtual system pattern topology 


Workloads 

You can achieve significant integration with middleware components and infrastructure 
resources optimize the components for a particular type of application workload. Little 
knowledge of the underlying components is required to deploy and use the solution. Dynamic 
and elastic capabilities are fully realized and the system can create or remove additional 
resources as required by the application demand. 
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Virtual application patterns are deployed using IBM defined topologies, which are not 
exposed to the IBM Workload Deployer administrator. Rather, the topology is based on the 
application components defined by the virtual application pattern (Figure 1-7) and is adjusted 
in the run time to accommodate the workload. 



Figure 1-7 Virtual application pattern topology 

Administrative access to the middleware infrastructure running the application workload is 
obtained through a simplified interface on the IBM Workload Deployer, not, for example, 
through an administrative console. 

IBM Workload Deployer provides much of the decision-making actions related to deploying 
and running the application. However, policies can be configured by the pattern builder that 
define routing policies, policies for scaling workload, logging policies to specify the level of 
logging detail, and JVM policies. These policies allow you to configure the minimum and 
maximum heap sizes, JVM properties, verbose garbage collection, and other JVM 
related settings. 


1.3 The cloud 

The cloud that virtual systems are deployed to consists of a set of hypervisors that you 
provide. You configure the hypervisors to the IBM Workload Deployer, then create pools of IP 
addresses to assign to provisioned systems on those hypervisors. Each hypervisor belongs 
to a cloud group. When a virtual system or virtual application is deployed, it is deployed to a 
cloud group. The IBM Workload Deployer selects one or more hypervisors in the cloud group 
and assigns IP addresses to the provisioned systems from the IP group for the hypervisor. An 
alternative to having a static set of IP addresses is to use an environment profile to specify 
the IP address is to be assigned by the pattern deployer. 
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The relationship of the cloud elements and a typical deployment flow is shown in Figure 1-8. 



Figure 1-8 Cloud configuration 

1.3.1 Hypervisors 

A hypervisor is a software virtualization program that provides a layer of abstraction between 
operating systems and physical resources on a machine. This abstraction layer allows 
multiple operating systems and application stacks to run on a single physical entity and share 
resources, thus providing higher levels of resource utilization. 

To set up the cloud, the administrator defines the location and login credentials for the 
hypervisors. These hypervisors host the virtual systems that IBM Workload Deployer 
dispenses. IBM Workload Deployer automatically detects the storage that is associated with 
the hypervisors and manages the placing of the middleware virtual systems across the set 
of hypervisors. 

The following hypervisors are supported: 

► VMware ESX 

► IBM PowerVM 

► IBM z/VM 
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1.3.2 IP groups 


Pools of IP addresses, known as IP groups, are configured for use by the deployed virtual 
machines. The administrator defines this pool of IP addresses, and when new virtual 
machines are created, the appliance takes care of assigning each machine a unique value. IP 
addresses can then be added to and removed from the pre-configured pool as needed. 


1.3.3 Cloud groups 

A cloud group is a collection of related hypervisors. When deploying patterns to create virtual 
systems, you use a cloud group as the deployment target. One or more hypervisors of the 
same type make up a cloud group, for example, you can group all of your ESX hypervisors 
together or all of your high-end PowerVM hypervisors together. You can manage resource 
allocation thresholds, such as processor or memory usage, and also verify the runtime status 
of your configured hypervisors. 


1.3.4 Environment profiles 

Environment profiles group related deployment configurations, such as virtual machine 
names, IP address assignment, and cloud groups. Deploying patterns with environment 
profiles provide deployments across tiers from a single pattern. 

In IBM Workload Deployer, environment profiles provide the functionality to: 

► Define the operational environments, such as development, test, or quality assurance 

► Define virtual machine naming conventions within the operational environment 

► Specify whether the IP group or a pattern deployer provides the IP address on 
the deployment 

► Segment the clouds, and IP groups within the clouds, to specific environments 

► Assign aliases to the cloud resources, such as clouds and IP groups 

► Assign sections within the clouds to specific users or groups 

► Define limitations on the number of virtual processors, virtual memory, and storage 

With environment profiles, you can also group multiple clouds to be used in the deployment. 
You can deploy a pattern to multiple cloud groups of the same hypervisor type. You might 
deploy a pattern to multiple PowerVM cloud groups, for example. However, you cannot 
deploy a single pattern to a zA/M cloud group and to a PowerVM cloud group. Environment 
profiles are platform-specific, so IBM Workload Deployer filters out the appropriate clouds. 


1.4 Administrative interfaces 

There are three ways to interact with IBM Workload Deployer: 

► Web-based user interface 

► Command-line interface 

► Representational State Transfer API 
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1.4.1 Web-based user interface 


The primary administrative access to the IBM Workload Deployer appliance is through the 
web-based user interface (Figure 1-9). This management console is enabled when the 
appliance is first initialized through the serial console. 


IBM Workload Deployer 


J- Administrator g 

0 Help 1 About | 

| Logout 

Welcome Instances 

Patterns 

Catalog Reports 

Cloud 

System 


IBM Workload 
Deployer 




Setting up your private cloud 


Working with virtual applications 


Working with virtual systems 


Working with virtual appliances 


Working with databases 


Download IBM Image Construction 
and Composition Tool 

Download IBM Workload Plugin 
Development Kit 

Download command line tool 



$ 


Figure 1-9 IBM Workload Deployer user interface 


The Welcome window provides wizards for you to configure the core functionality of IBM 
Workload Deployer in a step-by-step approach. There are also drop-down menus, highlighted 
in Figure 1-9, that accomplish the same results in a more granular way. The menu items are 
grouped by category. For example, the appliance settings are under the Appliance menu item, 
and the cloud management options for the hypervisors, and cloud and IP groups, are under 
Cloud, and so on. 


1.4.2 Command-line interface 

The IBM Workload Deployer command-line interface (CLI) provides a scripting environment 
based on Jython, the Java-based implementation of Python. In addition to commands that are 
specific to Workload Deployer, you can issue Python commands at the command prompt. 

The CLI allows you to manage a Workload Deployer appliance remotely. It communicates 
with the Workload Deployer appliance over an HTTPS session. The Workload Deployer CLI 
can run in both interactive and batch modes. 
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The CLI can be downloaded from the IBM Workload Deployer user interface to a Windows or 
Linux system. 


1 .4.3 Representational State Transfer API 

The IBM Workload Deployer appliance exposes a subset of its function using a 
Representational State Transfer (REST) API. The API is available on the same IP address or 
host name used to access the appliance user interface and CLI. 

The REST API provides a means to interact with the appliance that is both language neutral 
and programming model neutral. When using the REST API, you interact with the resources 
of the appliance, such as the hypervisors, patterns, script packages, and so on, just by using 
well-defined HTTP URLs and associated HTTP verbs (GET, POST, PUT, and DELETE). 

Unlike the Ul, the REST API is only supported over the HTTPS protocol. The appliance uses 
a self-signed certificate for its SSL sessions. The same certificate is used for the Ul, CLI, and 
REST API sessions. You must configure your HTTPS client to either accept or ignore this 
certificate during the SSL handshake. You must use an HTTPS client that allows you to set 
the HTTP headers for each request. 

Finally, the REST API supports only the sending and receiving of UTF-8 encoded data. 
Ensure that your HTTP client is appropriately set to encode and decode character data, 
including JSON data. 


1.5 Appliance settings 

After installation, the IBM Workload Deployer appliance settings can be performed through 
the administrative interfaces. This section provides a high-level overview of the administrative 
settings on the Workload Deployer appliance, covering networking, security, and basic 
appliance maintenance. 

Networking 

Networking settings can be configured for the appliance, including the Domain Name System 
(DNS), Network Time Protocol (NTP), and Simple Mail Transfer Protocol (SMTP) settings for 
the appliance. Although only a single Ethernet interface is required to be configured on the 
appliance for it to be functional, multiple Ethernet interfaces can be enabled. The most 
common reason for doing so is to add a level of redundancy to your environment. Another 
reason multiple Ethernet interfaces are used is to allow the appliance to separate the virtual 
machines network from the administrative one. 

Security 

IBM Workload Deployer is designed with key features that establish and manage trust across 
the cloud. In addition to ready for use security on the appliance, you can also use a 
Lightweight Directory Access Protocol (LDAP) to authenticate users with the Workload 
Deployer appliance. 

Appliance maintenance 

Using the backup and restore process, you can capture a complete Workload Deployer 
environment at any point. You can then either restore that environment on the appliance from 
which it was taken or restore it on another appliance. 
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Upgrades to the Workload Deployer appliance are done using firmware updates. New 
firmware versions can be downloaded from the IBM Fix Central website and used to update 
your appliance. A firmware upgrade changes only the appliance application and does not 
affect the Hypervisor Edition virtual images on the appliance. 

Power restart 

Finally, the appliance can be restarted or powered down from the user interface. 

Users and groups 

Users and user groups are configurable so that you can manage the level of access for each 
individual to your Workload Deployer appliance. 

User permissions are defined to determine which panels are viewable for each user and to 
determine a user's access to a particular object. Permissions provide the granularity to define 
the access and roles for each user. You specify access to patterns, virtual system instances, 
and catalog content at the object level. 

The permissions assigned to users define which administrative tasks for Workload Deployer 
the users can perform. In addition to determining which of the administrative pages are 
shown, the content of the Welcome page is dynamically generated by the appliance to 
display distinct content for users that are assigned dissimilar levels of access. For example, 
you can define the following role-based groups to control user access to resources on the 
appliance: 

► Pattern deployers: This group has permission to deploy patterns. Typically, these users 
have less middleware administration expertise and probably want to deploy constructed 
and configured environments. 

► Pattern authors and catalog managers: This group has permission to create patterns, 
upload script packages, and create custom images. These users are typically seasoned 
middleware administrators who can build and configure application environments. They 
map their existing configuration knowledge to the various customization approaches in 
IBM Workload Deployer. 

► Cloud and appliance administrators: This group has permission to administer the cloud 
infrastructure and the appliance. These users are familiar with the configuration and 
administration of the hardware components within the cloud. In addition, they have the 
skills necessary to manage and maintain the appliance. 


1.6 Tools for building custom assets 

When the pre-loaded images, plug-ins, and patterns do not meet all the requirements for your 
business workload, you can easily customize them using IBM Workload Deployer 
customization tools. The Pattern Editor in the IBM Workload Deployer user interface is used 
to create and customize virtual system patterns. You can customize virtual application 
patterns by using the Virtual Application Builder in the user interface. Both tools are available 
in the IBM Workload Deployer user interface. 

In addition, two new tools for creating custom content are available and can be downloaded 
from the IBM Workload Deployer user interface Welcome window (see Figure 1-9 on 
page 15). 

► The IBM Image Construction and Composition Tool is used to create virtual images to be 
used in virtual system patterns. 

► The Plug-in Development Kit is used to create custom virtual application patterns. 
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1.6.1 IBM Image Construction and Composition Tool 

IBM Workload Deployer includes IBM software product images with preinstalled middleware, 
such as WebSphere Application Server. Provisioning these pre-loaded images to your private 
cloud allows you to quickly build the virtual systems required to run your applications. 

Reality, however, is never that simple. It is likely that the images provided with the IBM 
Workload Deployer require modification before deployment. For example, most organizations 
have corporate standards for security compliance across hardware and software platforms. 
The images deployed to the cloud must be updated to contain the software required to 
comply to those standards. Another example is the requirement for the installation of agents 
used by monitoring software. Finally, consider the case where third-party products are 
required to be installed on the system. These changes could be made after deployment, but 
would need to be performed after every deployment, making that option impractical. As the 
number of virtual systems in the cloud grow, more time and effort is required to keep these 
systems in compliance. 

A better solution is to customize the images before they are deployed. The IBM Workload 
Deployer provides a “clone and extend” feature that allows you to deploy an image, update it, 
and then capture it as an image for future deployments. Although this feature has its 
advantages, you can take this concept one step further with IBM Image Construction and 
Composition Tool. With IBM Image Construction and Composition Tool, you prepare a 
software bundle that includes the information required to install and configure new software 
on a selected base image automatically at deployment time. These software bundles can be 
reused in IBM Image Construction and Composition Tool to create additional customized 
images by mixing and matching bundles with base operating system images. 

These customized images can be provisioned to a cloud using IBM Workload Deployer, IBM 
SmartCloud™ Enterprise, IBM SmartCloud Provisioning, or VMware ESX. A direct integration 
process is now available between IBM Workload Deployer V3.1 and IBM Image Construction 
and Composition Tool VI .1 . 

Integration with IBM Workload Deployer 

The new, tighter integration between IBM Workload Deployer and IBM Image Construction 
and Composition Tool takes place over a cloud provider connection defined in the tool 
interface. This link allows images in the IBM Workload Deployer image catalog to be viewable 
from the tool. 

Images from the appliance can be “imported” into the tool, effectively creating a 
representation of the image in the tool. The actual image stays on the appliance. With the 
image now in the tool, it can be extended by adding software bundles. When an image is 
extended, a new image description is generated using the imported image as a template, and 
the software bundles are added to the new image. 

Then the new image is synchronized. During the synchronization process, the tool requests 
that IBM Workload Deployer create a clone of the image and provision that clone to the cloud. 
Once provisioned, the tool communicates with the cloud image instance and performs the 
installation and configuration tasks defined by the software bundles. At completion of the 
software bundle execution, the synchronization is complete and the new virtual image can be 
tested. The last step is to use the tool to capture the extended image. The capture process 
cleans up the image to leave it in a state that is appropriate for redeployment. The captured 
image is defined in the tool, and is added to the catalog of virtual images in 
IBM Workload Deployer. 


18 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 



Figure 1-10 illustrates this process. 



Figure 1-10 Customizing IBM Workload Depioyer images 


The steps shown in Figure 1-10 show the process to use IBM Image Construction and 
Composition Tool to build deployable images to IBM Workload Depioyer. The steps are 
explained as follows: 

1. An operating system specialist using IBM Image Construction and Composition Tool 
imports a base image directly from IBM Workload Depioyer. The base image remains on 
IBM Workload Depioyer and a description of the image is stored in IBM Image 
Construction and Composition Tool. 

2. A software specialist defines the software bundles to be installed and configured on the 
base image. The software bundles contain installation and configuration parameters that 
define the middleware software to install to the virtual image: 

- Installation 

The installation parameters define how the IBM Image Construction and Composition 
Tool installs software into the virtual image. The parameters are stored as a script that 
is run by the IBM Image Construction and Composition Tool after the image is built. 
The installation of software occurs one time, and the software then becomes a 
permanent part of the image. 

- Configuration 

The configuration parameters contain a set of activation tasks that the IBM Image 
Construction and Composition Tool must perform to the installed software at 
deployment time. 

3. The image builder creates a virtual image by specifying a base image to use and selecting 
the bundles to install. The image builder customizes the installation and configuration 
(deploy) parameters for the bundles as needed. 

When this new image is saved, the IBM Image Construction and Composition Tool 
instructs IBM Workload Depioyer to create a copy of the base image, install the bundles, 
and perform the configuration. 
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4. The image builder verifies the new system, and then resets (cleans up) and captures 
the image. 

5. The image is now available in the IBM Workload Deployer image catalog and can be 
included in virtual system patterns and deployed to the cloud. 

Adding new images to IBM Workload Deployer 

Figure 1-11 illustrates a second scenario for using IBM Image Construction and Composition 
Tool with IBM Workload Deployer to increase the flexibility of the process of building virtual 
systems for deployment to the cloud. In this case, the base image is not taken from an 
existing IBM Workload Deployer image. Instead, the base image is a virtual system that 
exists outside of the IBM Workload Deployer domain. 


(T) Import image 


Operating system 
specialist 


Software 

specialist 



Image 

Construction and 
Composition Tool 


Base 

operating 
system image 



(T) Export OVA file 


(T) Import OVA file 


® Re-import image 
via cloud provider 

(^5) Extend virtual image 
(IT) Capture image 


Image builder 



IBM Workload 
Deployer 


Pattern builder 



Figure 1-11 Building deployable images with IBM Image Construction and Composition Tool 


The steps shown in Figure 1-11 show the process to add new images to the IBM Workload 
Deployer image catalog using IBM Image Construction and Composition Tool. The steps are 
explained as follows: 

1 . The operating system specialist defines the base operating system image to the IBM 
Image Construction and Composition Tool. In this case, the image is obtained from one of 
the following sources: 

- An existing virtual image (OVA file) with an operating system already installed is 
imported into IBM Image Construction and Composition Tool (Red Hat Enterprise 
Linux or SUSE Linux Enterprise Server only). 

- A running VMware virtual machine is captured into IBM Image Construction and 
Composition Tool. 

2. The image builder then exports the new image for use with the IBM Workload Deployer. 
The export process creates an OVA package that contains the metadata necessary for 
importing the image into and deploying the image from the IBM Workload Deployer. 

3. The IBM Workload Deployer administrator imports the image into the appliance. 

4. The image builder reimports the image into IBM Image Construction and Composition 
Tool from the IBM Workload Deployer cloud provider. This action provides a new base 
image that can be extended. 
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5. A software specialist defines the software bundles to be installed and configured on the 
base image. The image builder creates a new virtual image by specifying the base image 
and selecting the bundles to install. The image builder customizes the installation and 
configuration (deploy) parameters for the bundles as needed. When this new image is 
saved, the IBM Image Construction and Composition Tool starts a copy of the base 
image, installs the bundles, and performs the configuration. 

6. The image builder verifies the new system, and then captures the image. 

7. The image is now available on the IBM Workload Deployer for inclusion in virtual 
system patterns. 


1.6.2 Plug-in Development Kit 

Virtual application patterns take a decidedly application-centric approach for building, 
deploying, and managing middleware application environments in a cloud. By supplying your 
application and specifying both functional and non-functional requirements for that 
application, IBM Workload Deployer transforms the input from you into a installed, configured, 
and integrated middleware application environment (Figure 1-12). 
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Figure 1-12 IBM Workload Deployer Virtual application approach 
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A deployer of virtual application patterns does not need to know how to install, configure, or 
integrate the middleware and applications because the pattern encapsulates all that 
knowledge in plug-ins. The plug-ins of each pattern type define components, links, and 
policies and their functionality in the virtual application pattern (Figure 1-13). 



Figure 1-13 IBM Workload Deployer example virtual application pattern 


In a virtual application pattern: 

► Components represent functional profiles for a workload, such as enterprise application 
and database. 

► Links express a connection point between components in a virtual application pattern. In 
the pattern shown in Figure 1-13, a link specifies that the Enterprise Application has a 
dependency on the Database component in the pattern. 

► Policies like the Scaling Policy shown in Figure 1-13 allow you to specify functional and 
non-functional requirements for your application environment. 

By using IBM Workload Plugin Development Kit, user can create custom plug-ins (such as 

components, policies, and links) to extend an existing pattern or create a pattern type. 
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Configuring the IBM Workload 
Deployer 


In this chapter, we describe the steps needed to set up and configure IBM Workload 
Deployer. This chapter describes the IBM Workload Deployer user interface and the steps 
required to define the private cloud to the IBM Workload Deployer. 

This chapter contains the following topics: 

► Logging on to the appliance user interface 

► Setting up the user IDs 

► Setting up the cloud 


© Copyright IBM Corp. 2012. All rights reserved. 
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2.1 Logging on to the appliance user interface 


The configuration of the appliance is done with the user interface, which you must log on to 
first. To log on to the interface, complete the following steps: 

1 . Open a web browser, and enter the URL of the user interface: 
https :/ /appliance_hostname /] ogi n 

2. Log on to the IBM Workload Deployer user interface as an appliance administrator 
(Figure 2-1). Initially, use cbadmin, the default administrative user that comes with the 
appliance. The password for cbadmin is set during the installation of the appliance. 


IBM Workload Deployer 


User name: 
Password: 



© Copyright IBM Corporation 2011. All Rights Reserved. 


Figure 2- 1 IBM Workload Deployer login window 
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3. When you first log on to the IBM Workload Deployer with an administrator user ID, the 
Welcome window is displayed (Figure 2-2). The window has four expandable sections. 
Expand Setting up your private cloud if it is not already expanded. 


IBM Workload Deployer 


JL Administrator | © Help 



IBM Workload Deployer 


i0 


Download IBM Image Construction 
and Composition Tool 


jSTu^ Download IBM Workload Plugin 
Development Kit 


Download command line tool 


Setting up your private cloud 


Qg 




Step 1: Set up the appliance 

Step 2: Set up the cloud 

Step 3: Add virtual images 

Step 4: Set up pattern types 

Customize the appliance 
settings and create user 
accounts. You can also 
create user groups. 

Create the cloud by 
identifying IP groups and 
collections of hypervisors 
called cloud groups. 

Provide new virtual images 
to the catalog by uploading 
files or extending pre-built 
images. 

Install and configure the 
pattern types to enable the 
creation of virtual application 
patterns. 

Customize settings | Create 
users 

Add IP groups | Add cloud 
groups 

Add virtual images | Add 
script packages 

Configure pattern types | 
Default Deploy Settings 

Working with virtual applications 



Working with virtual systems 

Working with virtual appliances 


Figure 2-2 IBM Workload Deployer Welcome window 


2.2 Setting up the user IDs 

The cbadmin user ID is used in the scenarios in this chapter, which is acceptable in a lab 
environment. In most environments, however, additional user IDs are defined to restrict the 
activities of those users logging on to the appliance to specific activities. 

Consider the roles that the users of the appliance have in your environment and create a 
group for each role. Set the permissions for the group and then add the appropriate user IDs 
to each group. 
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For example, consider the following roles and corresponding groups: 

► The Admins group has the administrator role. Users who are assigned to this group can 
extend images and add content to the catalog. This group provides the Operations users 
all the basic components that they need to create a topology. The users in this group can 
lock some options of the basic virtual images, such as locking the operating system 
root password. 

► The Operations group has the operator role. This group is the WebSphere administrator 
group. Users from this group can define topologies and environment profiles. Users from 
this group can also install additional software during the extension process of 

virtual images. 

► The Deployers group has a basic user role. It has the default authority to deploy patterns 
to the cloud. 

► The Auditors group has the authority to view and change auditing settings and download 
audit data. 

User passwords can be defined directly in the IBM Workload Deployer. Alternatively, you can 
use a Lightweight Directory Access Protocol (LDAP) directory to authenticate users within the 
appliance. This directory server can be used only to authenticate, not to authorize, users and 
user groups. You can find further details about how to configure a directory server in IBM 
Workload Deployer at the following address: 

http : //publ i b . boul der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. worl odep. do 
c/aa/aat_sec_l dap . html 


2.2.1 Creating the user groups 

You must create the user groups that correspond to these roles. To create these groups, 
complete the following steps: 

1 . In the user interface, click System ->• User Groups. The group Everyone is provided by 
default (Figure 2-3). 



Figure 2-3 Listing the user groups 


2. Click New (the icon). 
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3. In the dialog box that opens (Figure 2-4), enter Admins as the group’s name, and add a 
description. Click OK. 


Describe the group you want to add. 


* Group name: Admins 

Descri pti o n : Th e ITS O a d m i n i strato r g ro u p| 


OK 


Cancel 


Figure 2-4 Define the Admins user group 


4. The new group is added to the list, and a configuration page opens. Give this group the full 
set of permissions, except for the Audit permission, by checking each box in the 
Permissions section and selecting Full permissions in the Cloud administration and 
Appliance administration sections. This configuration is shown in Figure 2-5. You do not 
need to save your changes because they are automatically saved. 
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Auditing permissions: IBM Workload Deployer provides an auditing function that 
tracks configuration changes, user authentication attempts to access objects that are 
secured by object-level access control, and more. To prevent abuse of user power in 
your environment, isolate the assignment of auditing permissions to one or more users 
who do not have other powerful administrative capabilities, such as the appliance or 
cloud administration permissions. 


5. Repeat steps 2 on page 26 through 5 to define the Operations group, but select only the 
following permissions: 

- Deploy patterns in the cloud 

- Create new patterns 

- Create new environment profiles 

6. Repeat steps 2 on page 26 through 5 to define the Deployers group, but this time define 
only the default permission to deploy patterns in the cloud. 

7. Define the Auditors group with full auditing permissions. 

2.2.2 Creating the user IDs 


With the groups in place, define the users and assign them to the appropriate group. In this 
step, the user IDs in Table 2-1 are defined. 

Table 2-1 User IDs 


User name 

Full name 

Group 

ITSOadml 

Administrator 

Admins 

ITSOoptl 

Operatorl 

Operations 

ITSOdepI 

Deployerl 

Deployers 

ITSOauditorl 

Auditorl 

Auditors 


These user IDs are created with basic permissions, but inherit the full range of their 
permissions from the group they are assigned to. When a user logs on to the user interface, 
the options in the console menu are an indication of the permissions for this user ID. 


To define the ITSOadml user, complete the following steps: 


1 . 

2 . 


In the user interface, click System Users. 


A list of user names for the appliance is displayed. Initially, th ere is one user called 


Administrator that is the cbadmin user ID. The green symbol ( 
means that the user is logged in. 


4B 


) next to the user ID 


To create a user, click New ( ) (Figure 2-6). 



Figure 2-6 Add a user 
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3. In the dialog box that opens, enter the required information for the ITSOadml user ID 
(Figure 2-7) and click OK. The user ID used to log in with is entered in the User name 
field. The Full name field contains the name of the user. 


Describe the user you want to add. 

* Username: ITSOadml 

* Full name: Administrator 

* Email address: ITSOadml@itso.ibm.com 

* Password: ###*###* 

* Verify password: #####*## 


OK 


Cancel 


Figure 2-7 Define the ITSOadml user 

The new user ID is added to the list, and a configuration page is displayed. 
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4. Click in the Add more., field for User groups and select the Admins group. Adding the 
user to the group automatically sets the permissions to the permissions inherited from the 
group (Figure 2-8). 


Administrator 2 

\ 

X 

User groups: 

Admins [remove] 



Everyone | 



Add more... 


Authored patterns: 

(none) 


Authored cloud groups: 

(none) 


In the cloud now: 

(none) 


Permissions: 

Deploy patterns in the cloud 



Create new patterns 

0 Create new environment profiles j 

Create new catalog content 
Cloud administration 
Read-only view 
Full permissions 
Appliance administration 
Read-only view 
Full permissions 

□ Auditing v 

Figure 2-8 User defined and default permissions 


5. Repeat steps 2 on page 28 - 4 for the ITSOoptl , ITSOdepI , and ITSOauditl users and 
add them to the appropriate group. The resulting list of users looks like Figure 2-9. 


Users 
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i 

T4- 

Administrator- 

m 

GO 

Administrators 
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Auditorl 
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Deployerl 

(0 

Operatorl 
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Figure 2-9 Final list of users 
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2.3 Setting up the cloud 


The next step is to configure the cloud environment to the IBM Workload Deployer. In this 
section, the resources of the cloud are defined. These resources include the hypervisors that 
host the deployed images, the pool of IP addresses used to assign to the images, and the 
cloud groups specified at deployment time. 

When a pattern is deployed, the deployer selects a cloud group to deploy to. The cloud group 
is a set of hypervisors. In turn, the hypervisors are assigned IP groups. When a virtual 
machine is deployed to the hypervisor, an IP address is selected from the IP group assigned 
to the hypervisor. Alternatively, you can assign IP addresses manually at deployment time 
using an environment profile. 


2.3.1 Creating the IP groups and adding IP addresses 

In this scenario, one IP group is defined with a list of host names. The IBM Workload 
Deployer must be able to resolve the host names to their corresponding IP address. The IP 
group is called “Default ESX IP Group”. 


Before you begin: You need the following information (related to the cloud) to define the 
IP groups: 

► Subnet address 

► Netmask 

► Gateway 

► Primary DNS 


To create the IP group, complete the following steps: 

1 . Log on to the appliance as an administrative user. 

2. Click Cloud IP Groups. 


3. Click New ( <£> ) to add an IP group. 
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4. Add the information requested in the dialog box (Figure 2-10) and click Create. 


Describe the IP group you want to add. 

* Name: Default ESX IP Group 

* Version: IPv4 0 


Subnet address: 
Netmask: 
Gateway: 
Primary DNS: 
Secondary DNS: 


9.42.170.0 

255.255.254.0 
9.42.170.1 
9.42.170.15| 


Create 


Cancel 


Figure 2-10 IP group Testbed2-IP-Group definition 
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Your console should now look similar to Figure 2-1 1 . 


IP Groups 

# 

Default ESX IP Group 

% X 



Subnet address: 

9.42.170.0 

Search... 


Default ESX IP Group 


Netmask: 

255.255.254.0 



Gateway: 

9.42.170.1 



Primary DNS: 

9.42.170.15 



Secondary DNS: 

None provided 



Hypervisors: 

(none) 



IP Addresses: 

(none) 




Add range 




start 




to 




end 




Add 

space delimited list of host 
names 

Add Host Names 


Figure 2-11 Default ESX IP Group definition 
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5. Add the IP addresses to the IP group either by entering ranges of IP addresses or by 
entering a list of host names. In this case, a list of host names is entered, separated by a 
space (not a new line) (Figure 2-12). When the names are entered, click Add Host 
Names. 


Default ESX IP Group 

% X 

Version: 

IPv4 


Subnet address: 

9.42.170.0 


Netmask: 

255.255.254.0 


Gateway: 

9.42.170.1 


Primary DNS: 

9.42.170.15 


Secondary DNS: 

None provided 


Hypervisors: 

(none) 


IP Addresses: 

(none) 



Add range 



start 

to 





end 

Add 





itso-cb-sy si. itso.ral.ibm.com itso-cb- 
sys2.itso.ral.ibm.com itso-cb- 
sy s3.itso.ral.ibm.com itso-cb- 
sy s4.itso.ral.ibm.com itso-cb- 
sy s5.itso.ral.ibm.com itso-cb- 
sy s6.itso.ral.ibm.com itso-cb- 
sy s7.itso.ral.ibm.com itso-cb- 

A~| 

0 


Add Host Names 



Figure 2- 12 Default ESX IP Group with host names 


Tip: When you add an IP address or host name, the IBM Workload Deployer attempts 
to look it up in the domain name server. If there are problems with this lookup, check 
your appliance settings to ensure that the Ethernet Interfaces are defined correctly, 
including the mask and that the domain name server is defined. 
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The results look like Figure 2-13. 


Default ESX IP Group 

% X 


Version: 

IPv4 

a 

Subnet address: 

9.42.170.0 


Netmask: 

255.255.254.0 


Gateway: 

9.42.170.1 


Primary DNS: 

9.42.170.15 


Secondary DNS: 

None provided 

- 

Hypervisors: 

(none) 


IP Addresses: 

0 9.42.171.32 (itso-cb-sysl4.itso.ral.ibm.com) 

[remove] 



0 9.42.171.33 (itso-cb-sysl5.itso.ral.ibm.com) 

[remove] 



0 9.42.171.35 (itso-cb-sysl6.itso.ral.ibm.com) 

[remove] 



0 9.42.171.36 (itso-cb-sysl7.itso.ral.ibm.com) 

[remove] 



[show more] 



Figure 2-13 Completed IP group 


2.3.2 Adding the hypervisors 


Add the hypervisors in the cloud by completing the following steps: 
1 . Click Cloud -» Hypervisors. 


2. Add a hypervisor by clicking New ( ^ ). 
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3. Insert the information required in the window that opens and click OK. In Figure 2-14, a 
hypervisor called blade9 is added to the cloud. 


Describe the hypervisor you want to add. If the hypervisor is managed by 
Virtual Center or Systems Director, cancel and create a new cloud group. 


* Name: 

* Type: 

* Hostname: 

* Username: 

* Password: 

* Verify password: 


blade9 

ESX 

blade9.itso.ral.ibm.com 

root 


a 


OK Cancel 


Figure 2-14 Adding blade9 

4. After a few seconds, another window opens. This window contains the hypervisor’s 
certificate. Click Accept. You must accept the certificate so that IBM Workload Deployer 
can deploy to the hypervisor. 


Do you accept the certificate for this hypervisor? 


Certificate: 1 
Version: 3 

Subject: OID. 1.2. 840. 113549. 1. 9. 2="1305234346,564d7761726520496e632e", 
CN=blade9. itso.ral.ibm.com, EMAILADDRESS=ssl-certificates@ vmware.com, 

OU=VMware ESX Server Default Certificate, 0="VMware, Inc", L=Palo Alto, 

ST=California, C=US 

Key: 

IBMJCE RSA Public Key: 
modulus: 

23424108315751865892421619061882387947706744896289552583709030475827 

78892110787323839515963375852072373345217865131337203753223537800588 

20572674230021685393982842919673437338639966764293458409133892701365 

!=!4Lft1 9 ft n T ft J.n 4L7 9 9 4L4L4L 1 9nft Oft ft 99ft n07 1 74.00 1 Qftd v 

■1 I j Jl 


Figure 2-15 Accepting the hypervisor’s certificate 


Accept 


Cancel 
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5. The new hypervisor is displayed in the list (Figure 2-16). Click the Refresh icon until you 
see the blade in maintenance mode. 


Hypervisors 

#' blade9 

% 

Search... 

fi- URL: 

https://blade9.itso.ral.ibm.con 

blade9 

jjj Username: 

root 


Password: 

[edit] 


Security certificate: 

l£3 Accepted [remove] 


Current status: 

Maintenance mode (must 



start) 


In cloud group: 

(none) 


Performance: 




Active virtual machines: 


0 Hardware 

2 cpu packages, 8 cpu core 


+J Deployment statistics 

0 successful, 0 failed, 0 con 


Historv 

The status of the hypervisor 


0 

Maintenance mode 


0 Virtual machines 

1 total - 1 stopped 


*J Networks 

1 total, 0 in use, 0 mapped tc 


Figure 2-16 The hypervisor is added to the cloud 
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6. The blade is in maintenance mode because you have not associated any IP groups to the 
hypervisors and you have not selected the storage devices on the hypervisor to use. To 
correct this situation, complete the following steps: 

a. Expand the Storage devices section and select the data store you want to make 
available for virtual images. 

b. Expand the Networks section and select VM Network. Select the Default ESX IP 
Group in the IP group field. 

See Figure 2-17 for an overview. 


hlade9 

* 

[0 £3 X 

a 

Networks 

1 total, 0 in use, 0 mapped to IPGroups 


In use 

Name 



a a 

VM Network 

[remove] 



VLAN: 

None provided 



IP group: 

Default ESX IP Group 0 

a 


D i stri b ute d Vi itu a 1 S w itc h : 

false 

Storage devices 1 total, 0 in use 

Right now: | | @ 


In use 

Name 



0 a 

data store 2 

[remove] [cleanup] 



Device type: 

VMFS 



Used space (MB): 

359891.0 



Reserved space (MB): 

359891.0 



Free space (MB): 

592429.0 



Total space (MB): 

952320.0 



Unique ID: 

4dcc463e-529051a0-756e- 

e41fl37a9e7c 



Shared by other hypervisors: 

None provided 

|<J_ 


INI 

J d 


Figure 2-17 Assign the data store, network, and IP group to the hypervisor 
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7. Add the rest of the hypervisors in the cloud. In this case, the same IP group is used for all 
of the hypervisors. The result is a list of the hypervisors in maintenance mode. The 
hypervisors stay in maintenance mode until they are added to a cloud group and started. 
The final list of hypervisors for this example is shown in Figure 2-18. 


Hypervisors 


Search... 

U' 

bladell 

it 

bladel2 

it 

bladelS 

it 

blade2 

it 

blades 

it 

blade46 

it 

blade9 

it 


Figure 2-18 Hypervisors list 


2.3.3 Creating the cloud groups 

Now that you have defined the hypervisors, you must pool them in cloud groups. 

In this example, use the cloud group called Default ESX Group. This cloud group is 
predefined in IBM Workload Deployer. In a lab environment with a small group of users, using 
one cloud group is probably adequate. Often though, multiple cloud groups are used to 
manage the hypervisors available to different groups of users. For example, you could assign 
one cloud group to each department or test group to prevent one group from 
monopolizing resources. 

When determining how to define the groups, keep in mind the following rules: 

► A cloud group can contain only one type (ESX, PowerVM, or z/VM) of hypervisor. 

► A cloud group can contain one or more hypervisors, but a hypervisor can belong to only 
one cloud group. 

A cloud group can be one of the following types: 

► Custom cloud groups consisting of z/VM or VMware ESX hypervisors. Custom cloud 
groups are populated manually with hypervisors you defined in the 

IBM Workload Deployer. 

► Managed cloud groups that represent sets of hypervisors managed by IBM Systems 
Director VMControl™ for IBM PowerVM hypervisors or VMware Virtual Center for VMware 
ESX hypervisors. Hypervisors in the managed cloud group are discovered when you add 
the cloud group or reset the connections for a cloud group. They cannot be added 
separately from the cloud group. 

More information can be found by seeing “About cloud groups” in the IBM Workload Deployer 
Information Center found at the following address: 

http : //publ i b . boul der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. worl odep. do 
c/sr/cg/cgr_cl oudgro . html 
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To create a cloud group, click Cloud Cloud Groups and click New ( ). Enter the name, 

description, hypervisor type, and select the group type (Figure 2-1 9). Click Create and 
complete the configuration by adding the hypervisors (if you created a custom cloud group). 


Describe the cloud you want to create. 

* Name: Testbedl-Cloud-Group 

Description: A detailed description 

* Hypervisor type: ESX [vj 

Group type: □ ,£“T Managed by a Virtual Center 


Figure 2-19 Cloud Group definition 


Create 


Cancel 


In this example, the existing Default ESX Group cloud group is used, so these instructions 
pick up with the configuration: 

1 . To add a hypervisor to the cloud group, click the Hypervisors input field (the Add more... 
box). This actions opens a list of the hypervisors. Select the hypervisor to add, in this 
example, Blade2. Repeat this action until you have added all the blades for the cloud 
group (Figure 2-20). 


Default ESX group 

CPU allocation: 

Cloud memory allocation: 
Hypervisors: 


100 % C 
100 % Z 

Status 


% x 


- 

The specified CPU will be allocated for deployments. 

The specified memory will be allocated for deployments. 

Hypervisors CPU Memory 


a 

it 

it 

it 

a 

it 


bladell 

[remove] 

bladel2 

[remove] 

bladelS 

[remove] 
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Figure 2-20 Hypervisors in Default ESX Group 
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2. There is a warning in the Current status field indicating that the hypervisor has not started 
because the hypervisors are still in maintenance mode (Figure 2-21). 


Default ESX group 

% X 

Description: 

Default cloud group for ESX or ESXi 

Created on: 

Dec 21, 2011 1:54:12 PM 

Type: 

°o° Custom cloud group 

Current status: 

A You must start at least one hypervisor to create 
virtual systems. 


Figure 2-21 Warning indicator that no hypervisors have started 

Each hypervisor in the list is a hot link to the configuration page for that hypervisor. Click 
the link for the first hypervisor, Blade2. This action opens the list of hypervisors and the 
configuration page for that hypervisor. You can now start the hypervisor. Click Start 
(Figure 2-22). 


blade36 (5 

1 * Q dl 

X 


Hardware 

1 cpu packages, 4 cpu cores and 8 GB memory 


0 

Deployment statistics 

0 successful, 0 failed, 0 consecutive failures 


0 

History 

Maintenance mode (must select a storage to 
use to start) 


0 

Virtual machines 

1 total - 1 started 


0 

Networks 

1 total, 1 in use, 1 mapped to IPGroups 


0 

Storage devices 

1 total, 1 in use Right now: 

66% 


Figure 2-22 Start the hypervisor 

3. Select the remaining hypervisors from the list, one at a time, and start them. 
You now have the resources you need to deploy a pattern to the cloud. 


Chapter 2. Configuring the IBM Workload Deployer 
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Part 2 


Virtual systems and 
IBM Image 
Construction and 
Composition Tool 


This part introduces the concepts associated with virtual system patterns in IBM Workload 
Deployer. It then describes how IBM Image Construction and Composition Tool can be used 
to create customized virtual images for use in the virtual system patterns. It provides two 
simple typical scenarios for using IBM Image Construction and Composition Tool with IBM 
Workload Deployer. 


This part contains the following chapters: 

► Chapter 3, “Introduction to virtual systems” on page 45 

► Chapter 4, “Getting started with IBM Image Construction and Composition Tool” on 
page 73 

► Chapter 5, “Scenario overview and prerequisites” on page 107 

► Chapter 6, “Scenario 1 : Bring your own operating system” on page 111 

► Chapter 7, “Scenario 2: Creating images with third-party software” on page 137 


© Copyright IBM Corp. 2012. All rights reserved. 
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Introduction to virtual systems 


This chapter introduces the concepts in IBM Workload Deployer related to virtual systems. 

This chapter contains the following topics: 

► Working with virtual systems in IBM Workload Deployer 

► Working with pre-loaded images and patterns 

► Customizing patterns and images 


© Copyright IBM Corp. 2012. All rights reserved. 




3.1 Working with virtual systems in IBM Workload Deployer 


Virtual systems of one or more virtual images are a foundational deployment model of 
IBM Workload Deployer. 

A virtual system is defined in IBM Workload Deployer through a virtual system pattern, which 
is a provisionable unit of one or more virtual images to be installed, configured, and integrated 
together to implement a topology. Virtual system patterns can be as simple as a single server 
product instance or as complex as a multiproduct and multinode deployment. IBM supplies 
virtual system patterns that come pre-loaded on the appliance. After a virtual system pattern 
is provisioned from IBM Workload Deployer, it is referred to as a virtual system instance. 

Virtual system patterns can be customized or new patterns can be created using the Pattern 
Editor in the IBM Workload Deployer user interface. Customization in the Pattern Editor is 
achieved through the use of parts, script packages, and add-ons. 

These concepts are illustrated in Figure 3-1 . 



The IBM Workload Deployer comes with a set of Hypervisor Edition virtual images in the 
virtual image catalog. These virtual images consist of parts that can be added to virtual 
system patterns. For example, the WebSphere Application Server V8.0. 0.1 virtual image 
consists of the following parts: 

► Administrative agents 

► Custom nodes 

► Deployment manager 

► IBM HTTP Server 

► Job manager 

► Stand-alone server 

► On-demand routers 
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When you create a pattern, the parts of the virtual images in the catalog are available for you 
to add to the pattern. 

Some patterns have advanced options, for example, a virtual system pattern that includes 
parts for WebSphere Application Server deployment manager and custom nodes provides 
advanced options to define clusters, enable the default messaging provider, configure 
session persistence, and enable global security. Patterns also allow you to define the start 
order for parts and script packages. 

A script package is a compressed (.zi p) file that contains artifacts that you want to be run 
and artifacts that you want to be run upon. The code included in the script package can be as 
simple as a .war file or as complex as a complete product. During deployment, script 
packages are transferred to the target virtual machines at a file location you specify in the 
configuration. After they transfer, they are extracted in that same location. When the virtual 
machines successfully start, script packages are then extracted and the scripts are run using 
the supplied command line. The goal behind using script packages is so you can customize 
your middleware environment beyond the customization provisions that are standard with 
Workload Deployer. A typical scenario might be to install a WebSphere Application Server 
application and configure the required JDBC resources into a server or cluster environment 
rendered by Workload Deployer. IBM Workload Deployer provides a catalog of script 
packages that perform customization tasks. You can clone and then tailor these packages for 
your use, or you can create new script packages. 

Add-ons available for parts in the pattern include the capability to add a new virtual disk to the 
virtual machine (formatted or unformatted), add and configure virtual NICs, and add an user 
ID to the virtual machine. 

With the release of IBM Workload Deployer V3.1 , you also have access to IBM Image 
Construction and Composition Tool to build customized virtual images that can then be 
deployed in a virtual system pattern (Figure 3-2). 



IBM Workload Deployer 
user interface 
Pattern Editor 



IBM Image 
Construction and 
Composition Tool 


Figure 3-2 IBM Image Construction and Composition Tool and IBM Workload Deployer integration 
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3.2 Working with pre-loaded images and patterns 


As was true with the IBM WebSphere CloudBurst® Appliance, a set of virtual images and 
virtual system patterns come pre-loaded on the IBM Workload Deployer appliance. After the 
appliance is configured to manage existing private cloud resources, immediate savings are 
realized by deploying these pre-loaded topologies. This section describes how to access 
virtual images and virtual system patterns. This section identifies the images and patterns 
that are pre-loaded on IBM Workload Deployer V3.1. In addition, this section provides an 
example of a pattern deployment that can be done with one of these available topologies. 


Hypervisor Editions: Some Hypervisor Editions versions supported on IBM Workload 
Deployer are not pre-loaded on the appliance. It is acceptable to download the Hypervisor 
Edition OVA from the IBM Passport Advantage® website and import it into the virtual 
image catalog. Some products might have additional tools to assist in the process of 
importing the image into the catalog or creating virtual system patterns. 


3.2.1 IBM Workload Deployer pre-loaded virtual images 

Virtual images used by IBM Workload Deployer are Open Virtualization Format (OVF) 
compliant images with special activation logic to help in deployment. There are a growing 
number of these virtual images for IBM software products that have been named Hypervisor 
Editions. 

IBM Workload Deployer V3.1 comes with Hypervisor Editions for DB2 Enterprise, DB2 
Express, WebSphere MQ, WebSphere Message Broker, WebSphere Portal, and WebSphere 
Application Server. 

To view virtual images on IBM Workload Deployer user interface, click Catalog -» virtual 
images (Figure 3-3). 


IBM Workload Deployer 


Welcome Instances Patterns Catalog Reports 


System 



IBM Work 


Reusable Components 
Virtual Application Templates 


Virtual Images 


Setting up your private cloud 


U- 


A list of virtual images and their status is displayed on this page. Images need to have 
their licenses accepted before you can use them. In the user interface, each image must 
be selected separately to accept each license agreement. You can add images using the 
.OVA format. 

Add-Ons 


Emergency Fixes 
Database Tools 


Figure 3-3 Navigate to virtual images 
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Selecting this option displays the virtual images in the IBM Workload Deployer catalog 
(Figure 3-4). 



Figure 3-4 IBM Workload Deployer V3. 1 pre-loaded virtual images 

The first step in using a virtual image is to accept the licenses, then use the image as is, or 
use the clone and extend feature to create a customized image. 

To accept the licenses of a virtual image, click the image in the list, and then click Accept in 
the License agreement field (Figure 3-5). 


Virtual Images 


D 

DB2 Enterprise 9. 7. 4.0 

X 

Search... 

n 

/V 

Description: 

DB2 Enterprise 9. 7. 4.0 database server. This is a full 
production image'. 

|DB2 Enterprise 9.7.4.01 

1$ 


Created on: 

Nov 19, 2011 4:23:18 AM 

DB2 Enterprise 9. 7. 4.0 (PowerVM) 

l?Q 


Current status: 

lS License not accepted 

DB2 Express 9. 7.4.0 

'«□ 


Updated on: 

Nov 19, 2011 5:31:50 AM 

IBM OS Image for AIX Systems 

l?Q 

J 

License agreement: 

!?□ Not accepted [accept...] 


tfZ! 





Figure 3-5 Accept the license of each virtual image 
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A window opens and lists each license that you must accept to use the image. Click each link, 
accept the license, and then click OK when all the licenses have been accepted. Figure 3-6 
shows that all the licenses have a check mark to the left, indicating they are accepted. 


All licenses have been accepted. Click OK to begin using this virtual image. 
@T VMWare Tools License 

ST Red Hat® Enterprise Linux® and Red Hat Applications 
ST IBM DB2 Enterprise Server Edition Version 9.7 License 


3.2.2 IBM Workload Deployer pre-loaded virtual system patterns 


Virtual system patterns provided by IBM represent hardened topologies of IBM middeware 
that can be provisioned immediately. In addition, custom virtual system patterns can be 
created by cloning existing patterns or by creating a pattern. 

To view virtual system patterns, click Patterns -» Virtual Systems (Figure 3-7). 


OK 


Cancel 


Figure 3-6 Accept each license 



Virtual Applications 



IB id Deployer 



Figure 3-7 Navigate to Virtual Systems 
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Selecting this option displays the virtual system patterns (Figure 3-8). 


IBM Workload Deployer 


A Administrator [ 

® Help | About 1 

Logout ] 






Welcome Instances 

Patterns 

Catalog Reports Cloud 

System 




Virtual System Patterns # 

Search... 

DB2 Enterprise ^ 

DB2 Enterprise (PowerVM) 

DB2 Enterprise and WAS Highly Available cluster ^ 

DB2 Enterprise and WAS Standalone ^ 

DB2 Express 
DB2 Express and WAS highly available cluster 
WebSphere MQ 7.0. 1.6 Advanced (PowerVM) ^ 

WebSphere MQ 7.0. 1.6 Basic (PowerVM) ^ 

WebSphere Message Broker 7.0.0. 1 (Advanced) ^ 

WebSphere Message Broker 7.0.0. 1 (Basic) ^ 

0 

Figure 3-8 IBM Workload Deployer V3. 1 pre-loaded virtual system patterns 




Select an item from the list for details and 
options 
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Pre-loaded patterns are included for IBM DB2, WebSphere MQ, WebSphere Message 
Broker, WebSphere Portal, and WebSphere Application Server. An example of an 
application-ready topology that comes pre-loaded on the IBM Workload Deployer appliance is 

the DB2 Enterprise and WAS Highly Available cluster virtual system pattern shown in 
Figure 3-9. 


DB2 Enterprise and WAS Highly Available duster 


% £> 


Topology for this pattern: 


Deploys to ESX hypervisors. 


m 

2 f Q 

Deployment manager 



7.0.0.19 

V 

Rb Custom nodes 



7.0.0.19 

0 



IH Cluster configuration 





H=| JVM tuning 

m 



$ Create DB2 Data 



Source to a highly 


§ Install DB2 drivers 

available DB2 Enterprise 



database cluster 




1 Q 

5. IBM HTTP servers 
7.0.0.19 


t 


n 

ft* DB2 Enterprise HADR 
Standby 

9. 7. 4.0 

-> 

a 

DB2 Enterprise HADR 
Primary 

9. 7. 4.0 





*] Comments 


There are no comments yet 


Figure 3-9 DB2 Enterprise and WAS Highly Available cluster window 


3.2.3 Deploying patterns 

Virtual system patterns are deployed to the cloud to build complex and application-ready 
middleware topologies. Weeks of assembling hardware and software can be replaced by 
specifying a few parameters in the IBM Workload Deployer pattern deployment wizard. The 
complex pattern shown in Figure 3-9 can be deployed through an easy to follow wizard that 
has the following steps: 

1 . Click Patterns -» Virtual Systems. 
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2. Click DB2 Enterprise and WAS Highly Available cluster in the list of patterns and click 
the Deploy in the cloud icon (Figure 3-10). 


IBM Workload Deployer 




X Administrator | 

1 0Heip | 

| About | 

| Logout 

==== = 

Welcome Instances 

Patterns 

Catalog 

Reports 

Cloud System 






Virtual System Patterns 

Search... 

DB2 Enterprise 

DB2 Enterprise (PowerVM) 


Q B 2 Ente rp rise and WA S H ig hl y Available clus te r] 
DB2 Enterprise and WAS Standalone 
DB2 Express 

DB2 Express and WAS highly available cluster 
WebSphere MQ 7.0. 1.6 Advanced (PowerVM) 
WebSphere MQ 7.0. 1.6 Basic (PowerVM) 


+ 


DB2 Enterprise and WAS Highly Available 
duster 


Description: 
Created on: 
Current status: 
Updated on: 

In the cloud now: 

Access granted to: 


Topology for this pattern: 


A highly availabe WebSph' 
pattern 

Nov 19, 2011 5:24:47 AM 
Read-only 

Dec 21, 2011 5:41:59 PM 

(none) 


Administrator [owner] 
Everyone [read] [remove] 
Add more... 


Deploy in the doud... 


X 

rver and DB2 


Figure 3-10 Deploy the virtual system pattern 


3. A window opens with links to each configurable category. Each link in the window can be 
selected to view or configure the options. In Figure 3-1 1 , the check mark to the left of the 
Choose Environment and Schedule deployment links indicates that they need no 
further configuration. 


Describe the virtual system you want to deploy. 

& Virtual system name: 

Complex Pre-loaded Pattern Deploymer 

fir Choose Environment 

ST Schedule deployment 

Q Configure virtual parts 

O Deployment manager 

□ Custom nodes 

□ IBM HTTP servers 

□ DB2 Enterprise HADR Primary 
Q DB2 Enterprise HADR Standby 


OK 


Cancel 


Figure 3-11 Deployment configuration 


Enter a name for the virtual system, in this example, Complex Pre-loaded 
Pattern Deployment. 


Chapter 3. Introduction to virtual systems 53 



Click Configure virtual parts to expand that section. 

4. Click Deployment manager. You see a number of settings you can modify to customize 
the deployment manager (Figure 3-12). At minimum, enter the passwords for the root 
user, the WebSphere administrator, and the database administrator. 


Fill in the required values for this part of the pattern. 


Name: 

* Virtual CPUs: 

* Memory size (MB): 

* Reserve physical CPUs: 

* Reserve physical memory: 

* Cell name: 

* Node name: 

* Feature packs: 


DMGRPart 

1 0 

2048 

False v 

False v 

CloudBurstCell 
CloudBurstNode 
0 none 


* 


0 

Cancel 


Figure 3-12 Settings for the deployment manager 


The list of parameters that you can configure is extensive, which provides optimal 
flexibility for customizing the environment. In this example, the list includes: 

- Virtual CPUs 

- Memory size 

- Reserve physical CPUs 

- Reserve physical memory 

- Cell and node names 

- Feature packs to install 

- Passwords for root 

- User ID and password for the WebSphere administrator 

- Data source name and JNDI name 

- Database settings including the database name, user ID and password, host and port 

- Web cluster prefix, number of clusters, and number of servers per node 

Click OK. 

5. Expand Custom nodes and enter the passwords for the root and WebSphere 
administrative users. Click OK. 

6. Expand IBM HTTP servers and enter the passwords for the root and WebSphere 
administrative users. Click OK. 

7. Expand DB2 Enterprise HADR Primary and enter the passwords for the database user 
IDs (db2inst1, db2fenc1, and dasusrl), root ID, and the virtuser user IDs. Click OK. 

8. Expand DB2 Enterprise HADR Standby and enter the passwords for the database user 
IDs (db2inst1 , db2fenc1, and dasusrl), the root ID, and the virtuser user IDs. Click OK. 
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9. Click OK to deploy the virtual system (Figure 3-13). 


Describe the virtual system you want to deploy. 

& Virtual system name: 

Complex Pre-loaded Pattern Deploymer 

Choose Environment 

& Schedule deployment 

& Configure virtual parts 

S’ Deployment manager 
& Custom nodes 

Sf IBM HTTP servers 

@T DB2 Enterprise HADR Primary 

Sf DB2 Enterprise HADR Standby 


OK 


Cancel 


Figure 3-13 Deployment wizard completed 
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lO.The user interface opens the new virtual system instance (Figure 3-14). 

- The Current status section shows the current state of the virtual system instance. 

- The History section has a log with information about the transfer of the files to the 
system. Click the Refresh button occasionally to follow the progress of 

the deployment. 


Created on: 

Jan 3 ; 2012 1:38:04 PM 


From pattern: 

DB2 Enterprise and WAS Highly Available cluster 1 


Using Environment profile: 

None provided 


Current status: 

H Transferring files to hypervisor cache (1 of 16 WebSphere Application Server 7.0.0.19) 

Updated on: 

Jan 3 ; 2012 1:41:29 PM 


Access granted to: 

Administrator [owner] 



Add more... 


Snapshot: 

Create 



(none) 


m History 

Transferring files to hypervisor cache [1 of 16 WebSphere Application Server 

10! 

7.0.0.19) 


Transferring files to hypervisor cache (1 of 16 WebSphere Application Server 7.0.0.19) 

Jan 3, 2012 1:41:27 PM 

Transferring virtual images to hypervisors 

Jan 3 , 2012 1:41:04 PM 

Generating model for topology and network 

Jan 3, 2012 1:40:19 PM 

Reserving cloud resources 


Jan 3, 2012 1:38:19 PM 

Deployment has been queued 

Jan 3, 2012 1:38:06 PM 

[#J Virtual machines 

6 total - 6 inactive 


[+j Comments 

There are no comments yet 



Figure 3-14 Pattern status 
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The virtual machines created for the instance are listed in the Virtual machines section 
(Figure 3-15). 
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Deployment-18 
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< 3 > 


Figure 3-15 Virtual machines 


You can expand each virtual machine to find additional information, including the 
status of the machine, the hypervisor where it is deployed, and so on. Figure 3-16 on 
page 58 shows the virtual machine for the deployment manager. The systems are 
operational and the middleware is configured and started. 

This window shows information about the deployment manager configuration. It 
provides links to log on to the console or to the system using VMC. You can review the 
output of the script packages. 
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U itso-cb- 
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Deployment-13 
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Linux 
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Version: 
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CloudBurstNode_l 
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Figure 3-16 Virtual machine details 
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3.3 Customizing patterns and images 


When the pre-loaded content does not meet the needs of an enterprise, IBM Workload 
Deployer provides many powerful options for customization. These customization options 
allow additional flexibility to satisfy a wide variety of requirements. Customization can occur in 
virtual system patterns and in virtual images. The following sections describe the key 
customization features available for each pattern and image. 


3.3.1 Customizing virtual system patterns 

When building custom virtual system patterns, you can start fresh with a new pattern, or you 
can clone an existing pattern as a starting point. After you have your initial pattern, use the 
Pattern Editor to build and modify the pattern. 

The following sections describe the key virtual system pattern concepts using the DB2 
Enterprise and WAS Highly Available cluster pattern to highlight these concepts. The DB2 
Enterprise and WAS Highly Available cluster pattern is a provisionable topology combining 
highly available configurations for both DB2 and WebSphere Application Server. The pattern 
supplies a primary and standby database server for a high availability database solution 
integrated with a WebSphere Application Server multiple node topology for larger scale 
development or production environments. IBM HTTP server is also provided on a dedicated 
virtual machine. 

To view the pre-loaded pattern in the IBM Workload Deployer user interface, click 

Patterns Virtual systems and click DB2 Enterprise and WAS Highly Available cluster 

to view the pattern (Figure 3-17). 


IBM Workload Deployer 


X icctuser | 

0 Help [ Abi 

Welcome Instances 

Patterns 

Catalog Reports Cloud System 


Virtual System Patterns 


DB2 Enterprise and WAS Highly Available cluster 

% 2 . & 


Search... 


Description: 

A highly available WebSphere Applicatior 

DB2 Enterprise 


> 

Created on: 

Nov 15, 2011 7:17:34 AM 

DB2 Enterprise (PowerVM) 


— j. 

Current status: 

1 . ^ Read-only 

DB2 Enterprise and WAS Highly Available cluster 



Updated on: 

Nov 23, 2011 11:55:50 AM 

DB2 Enterprise and WAS Standalone 



In the cloud now: 

4, Complex Pre-loaded Pattern Deployment 

DB2 Express 



Access granted to: 

3. Administrator [owner] 

DB2 Express and WAS highly available cluster 


- 





Everyone [read] 


Figure 3-17 DB2 Enterprise and WAS Highly Available cluster pattern 


The fields to note in Figure 3-17 are: 

1 . By default, pre-loaded patterns are set to Read-only. 

2. All users are given the ability to “Deploy patterns in the cloud”. 
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3. Although all users can deploy patterns in the cloud, permission needs to be granted to the 
specific patterns the user is authorized to deploy. By default, pre-loaded patterns grant 
read access to the Everyone user group. The owner of the pattern is the 
Administrator user. 

4. Actively deployed instances of the pattern are listed in the “In the cloud now” field. For 
example, this particular IBM Workload Deployer deployed an instance of the DB2 
Enterprise and WAS Highly Available cluster pattern called Complex Pre-loaded Pattern 
Deployment into the cloud. 


Tips: 

► To clone, edit, or create patterns, an administrator must grant your user ID the “Create 
new patterns” permission. 

► To clone a pre-loaded pattern, you must accept the license for all the virtual images in 
the topology. Hover the mouse over each part in the topology and a window displays 
the virtual image the node requires. Then go to the list of virtual images and ensure that 
you accept the license. Until you do this action, the clone option is not available for that 
virtual system pattern. 


To create a custom pattern, click the New button to create a blank canvas or click the Clone 
button from a selected pattern to use that pattern as a starting point. These buttons are 
shown in Figure 3-18. 



Figure 3-18 Icons for creating new patterns or cloning the current pattern 


In this example, a clone of the DB2 Enterprise and WAS Highly Available cluster pattern is 
created by completing the following steps: 

1 . Select DB2 Enterprise and WAS Highly Available cluster in the list of patterns. 

2. Click the Clone button. 
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3. Enter the following name for the new pattern (Figure 3-1 9): 
DB2 Enterprise and WAS Highly Available cluster (CLONE) 


Describe the pattern you want to add. 


* Name: 

Description: 
Virtual image: 


DB2 Enterprise and WAS Highly Available cluste 
A highly available WebSphere Application Sen/* 
Cannot change multiple images at once 


OK 


Cancel 


Figure 3-19 Describe the pattern 


4. A new pattern called DB2 Enterprise and WAS Highly Available cluster (CLONE) is 

created and the status is Draft. Without modification, this pattern remains an exact copy of 
the original pattern. 


Virtual System Patterns 

Search... 

DB2 Enterprise and WAS Highly Available cluster 

DB2 Enterprise and WAS Highly Available duster (CLONE) 


Bf 


# 

n- 


DB2 Enterprise and WAS Highly Available cluster (CLONE) 

Description: A highly available WebSphere Applic 

Created on: Nov 23, 2011 12:54:52 PM 


Current status: 


Draft 


Figure 3-20 Pattern clone 


Pattern Editor 

Customization of virtual system patterns is done by using the Pattern Editor. The Pattern 
Editor is accessed by clicking the Edit button on a virtual system pattern in Draft status 
(Figure 3-21). 



Figure 3-21 Open Pattern Editor 
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When building or customizing virtual system patterns in the Pattern Editor, parts, scripts, and 
add-ons are dragged from the palette (1) onto the Pattern Editor canvas (2), as shown in 
Figure 3-22. 
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Figure 3-22 Pattern Editor 


Parts 

Metadata describing a unique configuration of a virtual image is represented in a virtual 
system pattern as a part. Parts give more flexibility in virtual images and are unique to IBM 
Workload Deployer virtual images. A part is the basic building block in a virtual 
system pattern. 

Parts make it possible to represent different configurations achievable with a single virtual 
image. In essence, virtual images have the potential to take on multiple personalities. In 
Figure 3-22, you see a list of parts to the left. Each part in the list includes the name of the 
virtual image it is taken from. 
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Figure 3-23 shows three different personalities that the WebSphere Application Server virtual 
image can take on. These three personalities are represented by the Deployment manager, 
Custom nodes, and IBM HTTP servers parts. When this pattern is deployed, four instances of 
the WebSphere Application Server virtual image are started. On one instance, scripts are run 
to configure a deployment manager based on the properties provided with the Deployment 
manager part. On two instances, scripts run to configure Custom nodes agents. The fourth 
instance runs scripts to configure an IBM HTTP server. 

When the pattern is deployed, each part is running on its own virtual machine. 
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E& Deployment manager 
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Figure 3-23 Example parts from a single WebSphere virtual image 


The Custom nodes and IBM HTTP servers parts have a badge or spinner in the upper left 
corner. Changing the number value in this box indicates the number of instances of that 
specific part to be created. This tool is a powerful mechanism to grow the deployment size of 
a topology. The lock seen to the right of the number allows the pattern editor to choose 
whether to allow the deployer to modify the number of instances for a particular part at 
deployment time. 

In addition, parts have properties accessed from the icon in the upper right of the part. Values 
for properties are required at the time of deployment. Setting these properties in the Pattern 
Editor allows for default values to be available at deployment time. Locking the value allows 
the pattern editor to hide or disable configuration options from the pattern deployer. 
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Using the Custom nodes part as an example, Figure 3-24 shows some of the properties that 
you can set, including the passwords, node name, and more. These values can be locked by 
the pattern builder or left unlocked, allowing the pattern deployer to modify the values. 


Properties for part Custom nodes (CustomNodePart) 


Reserve physical memory: 

False |v) 


Node name: 

CloudBurstNode 


Password (root): 



Verify password: 



WebSphere administrative user name: 

virtuser 


WebSphere administrative password: 



Verify password: 



Enable VNC: 

True 0 

s 


OK Cancel 


Figure 3-24 Custom node properties 

Script packages 

Script packages allow configuration beyond what is done already in the virtual image. 
Common usage includes creating a script package to install an application or to configure 
integration with another image upon pattern deployment. 

Script packages are simple containers for artifacts necessary to run a script. The script 
package is a directory compressed into a single file that is uploaded to the IBM Workload 
Deployer catalog and then associated with patterns. These packages normally are set to run 
at deployment, but also can be run manually or upon deletion. Script Packages are displayed 
in the part box on the pattern (Figure 3-25.) 
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Figure 3-25 Script package in the topology 
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In the DB2 Enterprise and WAS Highly Available cluster pattern shown in Figure 3-9 on 
page 52, the script package named “Install DB2 drivers” runs on the custom nodes because 
the application servers that run on the custom nodes need the JDBC driver to work with DB2. 
The script package named “Create DB2 Data Source to a highly available DB2 Enterprise 
database cluster” runs on the deployment manager node to define the data source for the 
cluster. 

Relationships 

A key value proposition of IBM Workload Deployer is the ability to deploy a pattern of 
integrated images as a single unit. Integration is achieved by known relationships between 
images. There are two methods that allow for cross-configuration. 

A virtual image part can contain an IBM predefined relationship with another part. A 
predefined relationship is represented by an arrow between parts on the canvas. When these 
virtual image parts are included in the same virtual system pattern, IBM Workload Deployer 
recognizes this relationship and cross-configuration occurs. For example, when a custom 
node and a deployment manager are placed in the same virtual system pattern, they are 
automatically cross-configured. This action results in the custom node being federated to the 
deployment manager and the relationship between the deployment manager node and the 
custom node represented as the arrow shown in Figure 3-26. 
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Figure 3-26 Relationship between a deployment manager and custom nodes 
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For relationships not pre-determined by IBM, script packages are an equally useful method to 
wire images together in a pattern. This scenario requires that integration be configurable from 
a command line for scripting. The “Create DB2 Data Source to a highly available DB2 
Enterprise database cluster” is a good example of using a script package to cross-configure 
images in a pattern. To create a data source in the application server, the database host 
name must be known by the configuration script, which runs in the script package. Because 
the host name is not known to the user before deployment time, a special syntax is used to 
allow IBM Workload Deployer to inject the appropriate value. The host name can be seen in 
the DATABASEJHOST field in Figure 3-27. 


DATABASE_HQST : ${DB2_ESE_Primary.hostname>.${DB2_ESE_F ^ 

Figure 3-27 Cross-configuration syntax 

The full syntax is: 

${DB2_ESE_Primary.hostname}.${DB2_ESE_Primary.domain} 
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At deployment time, this line populates the DATABASEJHOST parameter value with the fully 
qualified host name of the database virtual machine. 

Taking a closer look at the syntax: 

► DB2_ESE_Primary is a unique name assigned to the DB2 primary part in the pattern. 
Each part in the pattern is assigned a unique name. 

► hostname and domain are the properties from the part that resolve at deployment time. 

Some properties are specific to the product image. The following networking and locale 
values are available for all images: 

► hostname 

► domain 

► ipaddr 

► netmask 

► gateway 

► pri_dns 

► sec_dns 

► language 

► country 

► encoding 

In addition, any parameters defined by script packages can be exchanged between parts in 
this way. 

Add-ons 

Add-ons provide a mechanism to accomplish operating system and virtual hardware-related 
tasks. Add-ons are run at deployment time before script packages. The default add-ons are 
viewable in the Pattern Editor (Figure 3-28). Add-ons can be used by dragging and dropping 
the wanted add-ons on to the part that requires image modification. 


Pattern Editor 

Search... 


Parts ( 22 / 22 ) 

Scripts (18/18) 

I Add-Ons C4/4) I 






Default add disk 

Adds a virtual disk to the virtual machine and optionally 
formats and mounts the disk. 

Default add NIC 

Adds a virtual NIC to the virtual machine r configures its IP 
address information and activates it. 

Default add user 

Defines an additional user on the virtual machine. 

Default raw disk 

Adds a virtual disk to the virtual machine,. the disk is added 
raw without partitions or formatting. Do not delete the default 
version as it may affect Virtual Application deployments. 


Figure 3-28 Add-ons 
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Advanced options 

When you edit the WebSphere Application Server topology of a virtual system pattern, you 
can configure advanced function for the virtual system pattern by using advanced options. 
The options that are available depend on the topology of the virtual system pattern you are 
editing. The predefined virtual system patterns provided by IBM Workload Deployer are of 
two basic types of topologies: single server virtual system patterns and cluster virtual 
system patterns. 

In the case of cluster virtual system patterns, such as the DB2 Enterprise and WAS Highly 
Available cluster pattern, you can enable messaging, session persistence, and global security 
(Figure 3-29). If you choose the single server virtual system pattern, you cannot enable 
messaging and memory-memory implemented session persistence. 
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□ Global security 
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Figure 3-29 Advanced options 


Ordering 

Ordering is a feature that determines the specific sequence parts and scripts that run at 
deployment. This coordination is critical to support pre-integration of virtual images. When 
you create a virtual system pattern, you can change the order in which parts and scripts run 
with the user interface. 
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Figure 3-30 shows the order of the parts. You can order the parts to deploy by group. Groups 
of parts are numbered and labeled with the clock icon. In the case of the DB2 Enterprise and 
WAS Highly Available cluster pattern, the deployment manager node instance and DB2 
Enterprise HADR Standby is deployed to the cloud first. Then two custom node instances, an 
IBM HTTP Server and DB2 Enterprise HADR Primary, are deployed after all instances of the 
previous group are created. 


Part order constraints 

Custom nodes start after Deployment manager 
IBM HTTP servers start after Deployment manager 
DB2 Enterprise HADR Primary starts after DB2 
Enterprise HADR Standby 
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Figure 3-30 Part ordering 


In a similar way, you can order the script packages. In this case, Figure 3-31 shows two script 
packages that belong to the same group, so they run concurrently after deploying 
all instances. 
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Figure 3-31 Script ordering 


With the ordering capability, almost any pattern can be designed with virtual images and 
script packages in a virtual system pattern. 
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3.3.2 Custom images using clone and extend 

Virtual images can also be customized. This book focuses on customizing virtual images with 
IBM Image Construction and Composition Tool, but be aware that there is a process in IBM 
Workload Deployer called clone and extend that also allows you to customize a virtual 
system. More information about using this technique can be found in Virtualization with IBM 
Workload Deployer: Designing and Deploying Virtual Systems, SG24-7967. 

With clone and extend, you clone an existing virtual image, which is then deployed to the 
cloud. You log on to the virtual image and manually customize the image. The last step is to 
capture the customized image. 

The clone and extend operation is largely manual and is done once to create a virtual image 
to use in patterns. 

To use clone and extend, complete the following steps: 

1 . Click Catalog Virtual images and select the image you want to clone and customize. 

2. Click the Clone and extend button (Figure 3-32). 



Figure 3-32 Start the clone and extend process 

3. Complete the deployment information required by clicking each link and completing the 
required fields (Figure 3-33). When complete, click OK. 


A virtual system will be created that you can modify and capture as an image. 
ST General information 

* Name: Extended WebSphere Application Server 8.0.0. 

Description: Virtual image description 

* Version: 1.0 

ST Deployment configuration 
Sf Hardware configuration 


OK 


Cancel 


Figure 3-33 Complete the information required to deploy the image 
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4. The new clone of the image is deployed. When you see the link for the virtual system 
instance become active in the “In the cloud now” field, click the link to continue monitoring 
the deployment (Figure 3-34). 
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Figure 3-34 The image is in the process of being deployed 


5. Continue to monitor the status of the image by clicking the Refresh button for the virtual 
system instance. 

6. Log on to the virtual system to complete the customization, for example, installing and 
configuring software, customizing system settings, creating user IDs, and so on. You can 
access the system from the hypervisor, for example, using a VMware vSphere client, or 
through a console link provided at the bottom of the information window for the virtual 
machine in the virtual system instance (Figure 3-35). 


_l J Consoles 

VJMC WebSphere 

Figure 3-35 Accessing the new image using VNC 
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7. After you complete your customization, in the IBM WebSphere Deployer user interface, 
select the virtual image in the list (click Catalog Virtual Images) and click the Capture 
button (Figure 3-36). 
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Figure 3-36 Capture the new image 
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Getting started with IBM Image 
Construction and Composition 
Tool 


This chapter introduces IBM Image Construction and Composition Tool and defines how it 
works with IBM Workload Deployer. It explains the components in the web interface that 
make up the tool and the relevance of each component when constructing virtual images or 
virtual system patterns for deployment. 

This chapter contains the following topics: 

► Product overview 

► Performing administrative tasks 

► Working with images 

► Working with software bundles 

► Installing and configuring IBM Image Construction and Composition Tool 


© Copyright IBM Corp. 2012. All rights reserved. 
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4.1 Product overview 


IBM Image Construction and Composition Tool is a web-based application that simplifies the 
construction and creation of virtual images through a number of wizards. It also aids in the 
packaging of automation scripts that can be used to extend (customize) existing virtual 
images and to deploy software on these images. 

You can install IBM Image Construction and Composition Tool on either physical or virtual 
operating systems on the Linux platform. The following platforms are supported: 

► SUSE Linux Enterprise server 1 1 SP1 , 32-bit or 64-bit 

► Red Hat Linux Enterprise Server 5.6, 32-bit or 64-bit 


4.1.1 User roles 

There are a number of roles that are identified to describe a user’s responsibilities regarding 

IBM Image Construction and Composition Tool: 

► Operating system specialists can use the tool to specify and create base operating system 
virtual images for organizational use. 

► Software specialists can use the tool to specify and create software bundles that 
encapsulate software content. 

► Image builders can use the tool to build virtual images for deployment by selecting the 
operating system and software. 

► Cloud administrators can provide users of their cloud with virtual machines with 
preinstalled software. 

These roles are conceptual in nature, meaning you do not see them on the IBM Image 

Construction and Composition Tool interface. The roles are used in this book to help you 

understand the nature of the tasks being performed. 


4.1.2 Building blocks 

IBM Image Construction and Composition Tool can create self-describing virtual images for 
deployment into cloud environments. Virtual image contents can be imported, defined, or built 
in the tool as building blocks. The building blocks are standardized, configurable, and 
reusable. They can be summarized as follows: 

► Base image 

The foundation image upon which other virtual images in the tool are built. It is a virtual 
image that contains a virtual machine descriptor and virtual disks. The virtual disks contain 
at least an operating system. A base image might exist in a cloud environment; 
alternatively, it can be imported statically into the tool or from a running virtual machine. 

► Software bundle 

A container for one or more software products or components to be included in a virtual 
image. An Image Builder builds a new virtual image by extending a base image with one 
or more software bundles. Software specialists design and implement a software bundle 
to describe its software contents, requirements, installation, configuration, and activation 
methods. The software bundle also describes deployment parameters that can be 
inherited by the consuming image. 


74 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 



When software specialists create a software bundle, they must provide metadata about 
the bundled software and implementation instructions for three basic tasks: Install, Reset, 
and Configure. 

Software bundle metadata refers to the basic data for the software bundle, such as the 
software name, the manufacturer, version, requirements, and so on. Software bundle 
implementation instructions refer to the scripts with their parameters that are run for each 
basic task, which in turn map to phases in the create and deployment processes. 

► Virtual Image 

A virtual machine template, which is the output of IBM Image Construction and 
Composition Tool. Every virtual image produced by the tool has a base image and one or 
more software bundles. A virtual image can be used to create one or more virtual 
machines with the same content. 

The virtual images of the tool are base images by definition; therefore, virtual images that 
are produced by the tool can re-enter the virtual image creation process and be the basis 
for new virtual images. A virtual image inherits the capabilities of its base image. 

► IBM Virtual System Activation Engine (VSAE) 

The software that activates and configures the virtual image and its embedded products at 
deployment time. The tool uses the Virtual System Activation Engine to run scripts that 
configure the bundled software. 

► Enablement Bundles 

A special software bundle used by the IBM Image Construction and Composition Tool. 
There is one enablement bundle for each cloud environment that the tool supports. 
Enablement bundles ensure that target virtual machines have a common configuration 
environment, ensuring that the Virtual System Activation Engine is installed on the virtual 
image. The tool automatically selects the appropriate enablement bundle. 

Creating virtual images in IBM Image Construction and Composition Tool involves selecting a 
base image, adding one or more software bundles, and specifying installation and 
configuration requirements. The tool creates virtual images by using a build environment. 
While these virtual images can be deployed by the build environment, they can also be 
deployed by using other environments, such as VMware ESX, IBM SmartCloud Provisioning, 
and IBM Workload Deployer. 


4.1 .3 Tool interface 

The tool is accessed from a web browser. When you log on to the tool, the Welcome window 
opens and displays a navigation bar at the top. The wizards accessed from the main window 
highlight the functions of the tool. 
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Figure 4-1 shows the Welcome window. 



Figure 4-1 The IBM Image Construction and Composition Tool Welcome window 

At the top of the IBM Image Construction and Composition Tool window, there are three main 
menu items: Welcome, Images, and Administrator. You also see a field where you can select 
the cloud provider to work with. 

Images menu 

The Images menu (Figure 4-2) is the menu you use most often in this tool. 


IBM Image Construction and Composition Tools 


Logout I Help 


Administer 


Cloud Provider: 


Build images , - L 

Welcome and Composition Tools! 


IBM Image Construction and Composition Tools is an application that simplifies and automates creation of virtual 
images. 


Figure 4-2 The Images menus 
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From this menu, you can build images or software bundles: 

► Build images 

The Build images menu is used to create, capture, extend, or customize base operating 
system images. You can customize a base image by extending it to include software 
bundles. Operating system specialists and image builders most often perform these tasks. 

► Build software bundles 


Software specialists use the Build software bundles menu to create reusable software 
bundles by including scripts that can be used to extend a base operating system image 
through software installation or software configuration. 


Administer menu 

The Administer menu (Figure 4-3) allows you to complete basic administrative tasks in 
the tool. 


IBM Image Construction and Composition Toots 

Logout I Hdp J 

Welcome Images 

1 3ZE E E3 Select Cloud Provider ^ 


Manage cloud providers 


Welcome to Image C 

Change password 
Download logs 

omposition Tools! 

IBM Image Construction and Composition Tools is an application that simplifies and automates creation of virtual 
images. 


Figure 4-3 The Administer menu and submenus 


The Administer menu submenus include: 

► Manage cloud providers 

You can add, delete, and edit connections to cloud providers, for example, 

IBM Workload Deployer. 

► Change password 

You can change the administrative password for the tool console. 

► Download logs 

You can download the log files for IBM Image Construction and Composition Tool. Log 
files can be useful when troubleshooting an issue or when you need to provide the log files 
to IBM Support. 

Cloud Provider selection menu 

The Cloud Provider menu (Figure 4-4) is used to select the cloud provider you work with. 
Selecting a cloud provider filters the lists of images and bundles you see in the tool interface. 


|IBM Image Construction and Composition Toots 

Logout 1 Help " 

Welcome Images Administer Cloud Provider: 
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Welcome to Image Construction and Composition 1 

IBM Image Construction and Composition Tools is an application that simplifies and autc 
images. 
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Figure 4-4 The Cloud Provider submenus 
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4.2 Performing administrative tasks 

The Administer menu is used to complete administrative tasks in the tool. You must use this 
menu to define a cloud provider in IBM Image Construction and Composition Tool before you 
can continue with any other function. 

4.2.1 Creating a cloud provider 

A cloud provider is a service provider that offers storage and software services on a private 
or public network, commonly referred to as a cloud. In this book, a cloud provider refers to the 
connection between IBM Image Construction and Composition Tool and the cloud provider. 
This connection is responsible for bidirectional communication between these systems. 

The cloud provider configuration in the tool communicates on ports 80 and 443 and performs 
REST API calls against the IBM Workload Deployer instance. When the bundle installation 
process occurs, communication occurs on port 22. 

You can define the following types of cloud providers in the tool: 

► An IBM Workload Deployer cloud provider creates the connectivity to 
IBM Workload Deployer. 

► A VMware ESX cloud provider creates the direct publishing capability to a VMware ESX 
Hypervisor from the tool. 

► An IBM Smart Cloud Enterprise provider creates the direct publishing capability to the 
public cloud offering from IBM. You can find more details about this offering at the 
following address: 

http : //www-935. i bm.com/servi ces/us/en/cl oud-enterpri se/ 
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Cloud provider configurations can be viewed and created by clicking Administer Manage 
cloud providers (Figure 4-5). A cloud provider configuration contains the credentials and 
network information required to access the provider. 



Figure 4-5 Cloud providers 

Two cloud providers are used in this book: 

► An IBM Workload Deployer. This cloud provider is defined in 4.5.5, “Logging in for the first 
time and creating a cloud provider” on page 103 

► A VMware ESX Hypervisor. This cloud provider is defined in 6.5, “Defining the VMware 
ESX cloud provider” on page 115. 

4.2.2 Changing the user password 

There is one user ID associated with an instance of the tool. You can change the password of 
this user by clicking Administer -» Change password. 

Password strength in the tool requires that you have at least one uppercase letter, one 
lowercase letter, and one number in the password string. Passwords must be between 8 and 
20 characters in length. 
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Enter and verify the new password, and then click OK (Figure 4-6). 


Change password 


Change current user's password 


New password: 



Verify password: 



OK 

Cancel 


Figure 4-6 Changing the password 


4.2.3 Downloading log files 

To download log files, click Administer -» Download logs. This function automatically 
compresses the logs for the tool instance and prompts you for a location to save the 
compressed file. This process works the same way when you download a file from your 
browser. Select Save, and the logs are downloaded to your browser’s download area in a 
.zip file format. 


4.3 Working with images 

There are a number of ways to get base images into IBM Image Construction and 
Composition Tool. You can import images from cloud providers, for example, you can import 
existing base images from IBM Workload Deployer. These imported images can be used as 
base images, and can also be used as templates for new images that you create. 
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To view and work with images in the tool, click Images Build images. The Images window 
that opens has two sections (Figure 4-7): 

► The left pane lists the identifiers for the images available to the image build tool. 

► The right pane is the details pane, where, when an image is selected, provides details 
about the image. 



Figure 4-7 List of images 

At the top of the list of images at the left are the following icons that allow you to work with the 
images in the list: 


%]: The Refresh icon refreshes the Images list. 


=2= : The New Image icon starts the wizard for creating an image. This icon is only 


available if you select a cloud provider in the Cloud Provider menu. In Figure 4-7, All is 
selected in this field and the New Image icon is not available. 


iimji 


: The Import icon allows you to import an OVA file. It is available only when you have a 


VMware ESX cloud provider configured and selected in the Cloud Provider menu. 


: The Import from Cloud Provider menu opens a window that allows you to select and 


import existing images from your configured cloud provider. 
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At the top the window at the right are icons that allow you to work with the selected image. 
These icons vary depending on the state of the image and whether you are in edit mode. 
Among these icons are: 


► 


: The 

► 

0) 

: The 

► 


: The 

► 

$ 

: The 

► 

M 

: The 

► 


: The 


4.3.1 Getting the base images 

This book shows how to use IBM Image Construction and Composition Tool to send 
customized images to the IBM Workload Deployer. The base images used are taken from a 
VMWare ESX and from IBM Workload Deployer. There are options to create or build images 
for both cloud provider types: 

► When the base image you want to use is a VMWare ESX image you have the 
following options: 

- Create a virtual machine, then create an OVA file of that machine to import into IBM 
Image Construction and Composition Tool. 

- Capture a running VMWare system as a new image. You see an example of this 
method in Chapter 6, “Scenario 1 : Bring your own operating system” on page 111. 

In both cases, the image is stored directly in the IBM Image Construction and Composition 
Tool repository. 

► When the base image you want to use exists on an IBM Workload Deployer, you import 
the image directly from the appliance. 

- When you import images from IBM Workload Deployer, image identifiers representing 
available images on Workload Deployer are created in the tool. These identifiers 
represent physical images in the IBM Workload Deployer instance that you can extend 
with software bundles, using scripts to perform software installations, software 
configurations, and operating system customizations. You see an example of this 
method in Chapter 7, “Scenario 2: Creating images with third-party software” on 
page 137. 

When you import an image from a cloud provider, it becomes a base image. Although you 
cannot update an imported image, you can clone it and then customize (extend) the new 
clone. An example of cloning an image and then extending it can be found in Chapter 7, 
“Scenario 2: Creating images with third-party software” on page 137. You can also create an 
image using any existing image as a template and applying that template to a base image. 


4.3.2 Extending, synchronizing, and capturing virtual images 

Extending images is a primary feature of IBM Image Construction and Composition Tool. 
Extending an image means that you take a base image and edit it to add bundles and specify 
the installation and configuration requirements. The bundles consist of software installation 
information that is used to create an image with the additional software. The bundles also 
contain configuration information that is used to customize the image each time it is deployed. 
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After the bundles are added to the base image, the image is synchronized with the cloud 
provider. The synchronization process creates a running, deployed virtual machine from the 
base image and then runs the software bundle tasks. 

After a new image is synchronized, and tested, it can be captured. For images on a VMware 
ESX cloud provider, the capture process creates a new updated physical image in the IBM 
Image Construction and Composition Tool repository. For images on an IBM Workload 
Deployer cloud provider, the capture process creates an image on IBM Workload Deployer 
and updates IBM Image Construction and Composition Tool with the information about the 
image. 

Figure 4-8 shows the typical process for extending a base image for use with a 
cloud provider. 


Create base 
OS image 


os 

Specialist 



Create bundle 

Software 

Specialist 


■> 


■> 





Image 

Repository 


Export 
OVA image 


Import OVA image 


Cloud Provider 


IBM Tivoli 
Provisioning 
Manager 






Bundle 

Repository 


Image 

Builder 


• Select base OS image to copy 

• Extend image (add bundles) 


IBM Image Construction 
and Composition Tools 


■ 




Synchronize image 


Capture image 


Figure 4-8 Working with virtual images 
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To edit an image in IBM Image Construction and Composition Tool, click Images Build 
images. Select the image and then click the Start Editing icon. You can extend the image by 
updating the sections shown in Figure 4-9. 


Sort: Alphabetically By install order 


Red Hat Enterprise Linux 
(RHEL) 


Add License 

Figure 4-9 Using the edit option on your virtual image 

In Figure 4-9: 

► Click Add bundle, and select the software bundles to add. 

► The Products section shows the products that are associated with this image. 

► You can adjust the minimum memory and the amount of virtual processors that are 
associated with this image in this window. When you adjust these values, it is assumed 
that sufficient resources are available on the hypervisor where an instance of this image 
is deployed. 

► The license allows you to copy and paste software product licenses that might be required 
for your virtual image. These license files are deployed with the instance that is created 
from this image. 

► When an image is deployed for synchronization, a virtual system is created on the cloud 
provider. The Virtual System section provides information about the virtual system, 
including the IP address. 


t Software Bundles: 


Hj? Add bundle 


► (§0 Red Hat Enterprise Linux (RHEL) [5.7] 


▼ Products: 


Red Hat Enterprise Linux 
(RHEL) 

▼ Hardware: 

Minimum memory (MB) 

2048 

Minimum vCPUs 

1 


^ Virtual System: 

No Virtual System is active at this time 
▼ License: 
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4.4 Working with software bundles 


Software bundles consist of the components that you want to install and configure on an 
image, above the operating system layer. You add software bundles to existing images as 
components that can be run at image build time or when you deploy an instance of your 
image at deployment time. The value of IBM Image Construction and Composition Tool is 
realized with the ability to add these software bundles to existing images, allowing you to 
extend the capability of the images. 

A bundle generally is responsible for installing and configuring one software product. Multiple 
bundles can be used together with a base image to build a new virtual image customized for 
with a set of configured products. 

To work with software bundles, click Images -» Build software bundles. You can take the 
following actions indicated by the numbers in Figure 4-10: 

1 . Refresh the contents of the bundles pane. 

2. Create a bundle using the wizard. 

3. Import existing software bundles. These software bundles are compressed files with a 
.ras extension. You can expand these files to take a more detailed look at the bundle 
contents, which is useful in seeing the driver scripts and other components that make up a 
bundle that you did not create. 



Figure 4-10 Options available when creating a software bundle 


4.4.1 Importing existing software bundles 

Software bundles can be shared between users. To use these shared bundles, you can 
import existing software bundles into IBM Image Construction and Composition Tool. The 
bundles are uploaded from the local file system where IBM Image Construction and 
Composition Tool is installed. 
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To import software bundles, complete the following steps: 

1 . Click Import. Complete the following information, as shown in Figure 4-1 1 : 

- Specify the file location and name of the bundle that you want to import. This file must 
be present on the host on which the tool is installed and is not relative to your 

local workstation. 

- Specify a user name and password. Verify the password. These fields are the details 
of the host from which you want to import the bundle. 

- Enter a Storage Location where the bundle will be stored. The default of local means 
that the bundle is created in the file systems represented by the tool’s installation. 

- Specify a Community. This option is available for users who have an IBM SmartCloud 
account. For details about this public cloud offering from IBM, go to the 

following address: 

http : //www. i bm. com/cl oud 

This option allows you to store software bundles in the IBM SmartCloud account and 
specify who has permissions to use the account in the IBM SmartCloud. 



Figure 4-11 Import a bundle 
2. Click OK. 

4.4.2 Creating bundles 

Clicking the New bundle icon starts the New Bundle Creation wizard. This wizard allows you 
to add pre-existing software installation scripts and turn them into software bundles. 

This activity is normally performed by a software specialist who has deep knowledge and 
understanding of how the software is implemented. This activity allows the specialist to 
capture intellectual capital around product installation and configuration and share it with 
other practitioners in the organization. 

The creation of software bundles involves defining the product parameters that are exposed 
when the image is deployed to customize the deployed software. When creating new 
bundles, the recommendation is that generic or time-intensive tasks, such as installing 
product binary files, take place as part of the bundle installation. Tasks that are defined at 
bundle installation time run only once. 


86 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 


The software bundle also allows runtime configuration tasks to be performed. These tasks 
allow the per instance customization capability of the bundles at their time of deployment. 
With this runtime configuration capability, the number of images that is required to satisfy an 
organization’s software deployment capability is reduced. 


Writing scripts: When you develop software bundles and their underlying scripts, these 
scripts must be written with the target platform in mind. Write the scripts in a scripting 
language, for example, bash shell for UNIX or .bat files for Windows operating systems, 
which the target platform can translate and run correctly. IBM Image Creation and 
Composition Tool makes the assumption that these executable scripts have the required 
software to run correctly on the target host. 


Planning considerations for bundles 

Before you begin creating bundles, consider the following guidelines: 

► Ensure that you have the methodology of your software deployment worked out. 

- Where is the software binary to be installed going to be located? Will the binary files be 
included in the bundle or will the software be stored on a centralized host in the cloud 
environment? 

If your software binary is over 100 MB, do not include this binary file in your software 
bundle. Doing so can cause significant traffic in the network when it comes to 
deployment time of the instance with the associated bundle. You can get binary files to 
the target host using the wget command to download the software binary from a 
centralized HTTP server in your environment where the software binary files are 
hosted. 

- What variability will be built into the software bundle? 

Map out the variables that need to be exposed and configured at deployment so that 
different configurations of the software on the images can be instantiated. 

- Is there a specific order in which this software should be deployed? 

With the orchestration of software bundles, it is important to understand the integration 
and product dependencies of what is being installed and configured. This orchestration 
is necessary to ensure that automated deployment runs smoothly. Remember that with 
automated deployments of software with little or no human interaction, orchestration 
(ordering of software product deployment) is important. If there are dependencies on 
certain pieces of software being installed before others, understand these 
dependencies and account for them in your scripts and bundles. 

► Ensure that operating system dependencies for the product are accounted for in the 
scripts or in the image that you want to extend with the bundle. 

- Do your scripts have to create the users and group under which it is necessary for the 
software to run? 

In traditional non-virtual environments, the job of creating users and groups falls to the 
subject matter expert (SME) who is responsible for the operating system administration 
and maintenance. In the virtualized world, these dependencies can be provided for 
using one of the following methods: 

• All required users and groups exist on the base default operating system image, 
which is used as a template for any image instance that is created in 

the environment. 

• Users and groups are created with scripts in the software bundles. 
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There is no hard and fast rule over which mechanism to use. Decide by talking to the 
image builders and the architects who control the virtualization standards for your 
particular environment. 

- What file systems are required for the software deployment? 

Again, in many enterprise environments, this task is a task traditionally left to the 
operating system administrators. In the cloud, these requirements must be accounted 
for in the base operating system image and fall outside of the scope of software 
bundle creators. 

The reasoning behind this setup is that disk allocation, volume group setup, and file 
system allocation are difficult tasks to automate through scripting. The easiest and 
least error prone mechanism is to have these disk allocations and file systems created 
and supplied on the base image on which you want to do the software 
bundle installation. 

► Ensure that the scripts that do the software implementation are created and tested before 
building the bundle. 

For the software specialist, most of the time taken when creating software bundles is the 
creation and testing of the underlying scripts. It is a good idea to test these scripts before 
adding the abstraction layer that the bundle creates. This action helps when it comes to 
troubleshooting errors in the bundle so that you can determine where the issue with the 
bundle lies. 

Building software bundles 

Software bundles are created by software specialists. The bundles contain general 
information about the contents of the bundle and the requirements of the bundle, but at the 
core of the bundle are the scripts that install and configure the software on the base image. 
To illustrate the concept, we build a bundle to install and configure WebSphere Application 
Server Community Edition. It contains a script that installs the software and a script to create 
and start an application server. 
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A new software bundle is created by clicking the New bundle icon (+). The Create a New 
Bundle window opens (Figure 4-12). 



Figure 4-12 Creating a software bundle 

The window contains the following fields: 

► Name: Enter a descriptive name that identifies the bundle. 

► Universal ID: The tool uses this ID, which is a mandatory field, to generate the internal 
system name for the bundle. This ID uses the following format: 

<text> . <text> . <text> 

► Version: This field is also a mandatory field that is used by the tool to generate the internal 
system name for the bundle. This version number uses the following format: 

<number>.<number>.<number> 

► Description: Enter a description of the bundle and its purpose that is meaningful to all who 
want to use the bundle. 

► Storage Location: The storage location should be set to local. The only time this value 
would be something other than local is if you are working with IBM SmartCloud. Then, you 
can store your bundles in the cloud. 

► Community: This field allows you to store your bundles in a specific IBM SmartCloud 
community. This field becomes available only if you signed up for the 

IBM SmartCloud offering. 

► Uses IBM Installation Manager: This option allows you to create a bundle using IBM 
Installation Manager. An additional window opens that allows you to upload a specific IBM 
Installation Manager response file along with details around the user who is performing 
the IBM Installation Manager installation. 

Clicking Create adds the new bundle to the tool. In this example, a new bundle is created to 
install and configure WebSphere Application Server Community Edition. 
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Several menu options, which correspond to the numbers shown in Figure 4-13, are shown in 
the upper right of the bundle options window. 



Figure 4-13 Bundle menu options and tabs 

1 . The Draft indicator shows that the software bundle is in draft format and can be edited. 

2. The Refresh icon refreshes the right pane of the window. 

3. The Save button saves your progress. This button is disabled in the figure because no 
changes have been made that need to be saved. 

4. The Publish to Cloud Provider icon publishes the bundle to the cloud provider and enables 
other users to share and use it. 

5. The Export icon allows you to export the bundle to share across IBM Image Construction 
and Composition Tool installations. 

6. The Clone Bundle icon allows you to clone an existing bundle, using the existing bundle 
as a template for other bundle creations. 

7. The Delete icon allows you to delete the bundle. 

There are six tabs that are used to define the bundle. To build the bundle, open each tab from 

left to right and complete the relevant information. Then save the bundle, and optionally, 

publish it. 
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The General tab 

The General tab (Figure 4-14) shows the information entered for the bundle when you created 
it. The “Products in this bundle” section has an Add icon (+), allowing you to document the 
products that are installed by the bundle. 


WebSphere Application Server ... Draft 

1 \ 

5 di 1 X 

j General! 

Requirements Install Configuration 

Firewall 

Reset 


General Properties 


WebSphere Application Server Community Edition for 32- 


com.ibm. websphere, was.ce.linux 


1.0.1 


Fri Dec 09 2011 17:44:18 GMT-Q500 (Eastern Standard 
Time) 

Fri Dec 09 2011 17:51:55 GMT-Q500 (Eastern Standard 
Time) 


Products in the bundle: 



+ 

Product Name 

Version 

Vendor 


WebSphere Application Server Community Edition 

2.1. 1.5 

IBM 

K 

Java SDK 

6.0 SR9 

IBM 

X 


Figure 4-14 The General tab of the software bundle window 


local 


WebSphere Application Server Coimunity 
Edition for 32bit Linux Systen.a 


Name: 

Repository: 

Description: 

Universal ID: 
Version: 
Publisher: 
Created on: 
Updated date: 


Chapter 4. Getting started with IBM Image Construction and Composition Tool 


91 


The Requirements tab 

The Requirements tab (Figure 4-15) provides details about the requirements for the software 
bundle, including supported operating systems, which defines the target platforms for the 
bundle: 

► The Supported Operating Systems section allows you to indicate that a specific operating 
system is required for the bundle. By default, an Any entry is included in this section, 
indicating that the bundle can be used on any supported operating system. You can delete 
or add entries in this section. Each operating system entry includes: 

- Type: Linux or AIX. 

- Distribution: A supported operating system of the operating system type. Options for 
Linux include Red Hat Enterprise Linux and SUSE Linux Enterprise Server. The only 
option for AIX is AIX Server. 

- Architecture: x86-32, x86-34, IA64, Power System, and IBM System z®. 

- Version: The operating system version. 

This information is used later when you add this bundle to an image. The image must be 
compatible with this information or the bundle is not added. 

► The Required Software section documents the required software components for the 
bundle. This information is not validated against installed software when you add the 
bundle to an image. 

► The Required Bundles section contains a list of existing bundles to add with this bundle 
and enables these bundles to run before the scripts in this bundle. 



General 

Requirements 

Install 

Configuration 

Firewall Reset 


Manage Bundle Requirements 

Requirements for installing the bundle: Required Operating System (s)r Product()s and Bundles(s) 


▼ Supported Operating Systems: 

# Add Operating System 
Expand All | Collapse All 

▼ E® [Linux] Red Hat Enterprise Linux (RHEL) (x86-64) 
Type: 

L i n u x 

Distribution: 

Red Hat Enterprise Linux (RHEL) 

Architecture: 

1x86-64 

Version: 

| 


▼ Required Software 

# Add Required Software 

No Required Software specified. 

▼ Required Bundles 

# Add Required Bundle 

No Required Bundle specified. 

Figure 4-15 Requirements tab of the software bundle window 
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The Install tab 

The Install tab provides options that run when the image is extended with the software 
bundle. The task in the Install tab is run when the bundle is synchronized with the cloud 
provider, not when an instance of the image with this software bundle attached is created on 
the cloud provider. Tasks on the Install tab are referred to as Image build time tasks. These 
tasks typically include the following types: 

► Copying binary files to your image 

► Installation only of base software binary files 

► Image customization tasks 

Figure 4-16 displays the options available on the Install tab. 


General 

Requirements 

Install 

Configuration Firewall 

Reset 



Install operation configuration 

Define ho tv to install the bundle 



Figure 4-16 Script options available when inputting arguments for scripts at build time 


The Files to Copy section contains scripts and files that are run when the virtual image is 
synchronized with the cloud provider. Executable scripts can be fed parameters that can be 
customized before script execution. Click the plus sign (+) to upload a new file. If the file is an 
executable script, select the Make executable option, and click Upload. In this example, a 
script to install WebSphere Application Server Community Edition, called instal lWASCE.sh, is 
added to the Files to Copy section. The contents of the script can be seen in 
“installWASCE.sh” on page 382. 


Script return code: All scripts that you use to install software in the Install tab must have a 
return code of zero. If the installation scripts return a value greater than zero, the tool 
interprets this action as a failure and the image synchronization fails. 


Chapter 4. Getting started with IBM Image Construction and Composition Tool 93 




In the Command section, you enter the command to run the script uploaded in the Files to 
Copy section. From the Run Command menu, select the executable script, then complete 
the Run as and Arguments fields. The command to run the script is installWASCE.sh. 

The script takes several parameters so each of these arguments is entered in the Arguments 
section with the value to use. The up and down arrows to the right of the arguments are used 
to position them in the order the script expects them. As the arguments are entered, the 
command that is run is updated with the arguments in the preview section located 
immediately below the Run Command line. 


Script arguments: The script must be written to accept arguments in the short form format 
as follows: 

scriptname -argumentl <argumentl value> -argument2 <argument2 value> 


Enter the arguments in the Name, Label, Value, and Is Password fields as follows: 

► Name: Defines the name by which the script identifies the parameter. This name is the 
parameter name in the executable script. 

► Label: Identifies the parameter in the tool. 

► Value: Allows you to specify a default parameter for this value. You can change this value 
when the image is synchronized with the cloud provider by editing the bundles options at 
synchronization time. 

► Is Password: Obfuscates the password value that you specify. As with the other fields, you 
can change this value at virtual image synchronization time. 

The Run as field contains the user ID that you want the script to run as. Typically, this user ID 
is root or the administrative user of the system. 

The Configuration tab 

The Configuration tab is set up similar to the Install tab with some additional options. For 
example, you can add multiple configuration operations. The distinction between this tab and 
the Install tab is that the scripts and files that are uploaded in this tab become part of the 
images activation framework and run each time an instance from the virtual image is created 
on the hypervisor. Thus, when the image is deployed, the scripts uploaded in this section run. 

The Configuration tab scripts pass their parameters and their values in an OVF environment 
document, which ensures execution at deployment time. 

A typical usage scenario for this tab is as follows: 

► Post Installation configuration of the products installed 

► Application deployments 
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Click the Add icon (+) in the left column to add a Configuration task in the right pane 
(Figure 4-17). 


General Requirements Install j Configuration! Firewall Reset 


D e p I oy-ti m e co nfi g u rati o n 

Define how to configure the bundle in a new instance of a virtual machine 


Config Operations 

ConfigWASCE 


# 


Operation name: 
Service name: 


ConfigWASCE 
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© Files to Copy 


Files that should he copied to the target machine: 

II Source (URI or file name) Executable * 
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© Command 


Run Command: 


ConfigWASCE. sh 
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script to run 


Hide Preview 
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root 
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Is Password 
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© Dependencies 


Services required by this operation: 




Figure 4-17 The Files to Copy section in the Configuration tab 


The Files to Copy, Run Command, and Arguments sections are populated in the same 
manner as they are in the Install tab: The difference here is that these options are run only 
when the image is deployed as an instance. 

There is an additional window called Dependencies that allows you to add or enable specific 
services on the virtual image that you might need when an instance of the image is created. 
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The Firewall tab 


Applicability: The Firewall tab function is only applicable to images on 
IBM Smart Cloud Enterprise. 


On the Firewall tab, you specify port numbers that must be open on the firewall service of the 
deployed operating systems. You can specify fixed single ports and port ranges or ports or 
port ranges that are specified using configuration parameters. These ports are opened when 
the instance is created at deployment time. Either enter network port numbers or use the 
menu to select configuration parameter values to use. 

Figure 4-18 shows the Firewall tab options. 


General Requirements Install Configuration 


Firewall 


Reset 


Set firewall configuration 

Specify a range of ports to open in the firewall 

Ports configurations (Set the port's number or select a parameter): 


# 
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Figure 4-18 The Firewall tab options 
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The Reset tab 

You can specify a reset script on the Reset tab. The reset script cleans up any state relative 
to the software bundle before image capture. It can be used to delete temporary files left from 
an installation or reset a configuration to an initial or known state. Similar to the Configuration 
tab, files uploaded in this tab become part of the images activation framework, but run each 
time an instance containing this bundle is captured. The reset tasks that are defined on this 
tab follow the same format for adding a script that are followed on both the Install tab and the 
Configuration tab. 

Figure 4-19 displays the Reset tab options. 


General Requirements Install Configuration Firewall 
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Run Command: 
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Is Password 
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Figure 4-19 The Reset tab options 


4.4.3 Publishing a bundle and cloning bundles 


When the software bundle creation process is complete, you can publish the bundle using the 


Publish icon (&)so that others can use it. Publication is optional; the bundle can be used in 


extending images while still in edit mode. 

If you choose to publish the software bundle, you can no longer edit the software bundle or 
change it, but you can clone it. Cloning is the operation of taking this existing software 
bundle, duplicating it with all its settings, and then placing it in edit mode. Cloning allows you 
to use an existing published software bundle as a base template and change the options in 


the various tabs as needed. To use the clone function, click the Clone icon ( [rp ) 
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4.5 Installing and configuring IBM Image Construction and 
Composition Tool 


We created a quick start guide to get started with IBM Image Construction and Composition 

Tool. Installation using the command line is faster than using the graphical user interface, 

(GUI), so we outline and describe the steps for installation using commands. 

The following list itemizes the basic requirements for installing IBM Image Construction and 

Composition Tool: 

► An IBM Workload Deployer appliance with the cloud configured. 

► Red Hat Linux Enterprise Server Edition 64-bit V5 operating system to host IBM Image 
Construction and Composition Tool. 

► A terminal client on your local workstation to use SSH to access the Linux host where you 
install the IBM Image Construction and Composition Tool software. 

► Root access to the Linux host on which you are deploying the software. Throughout our 
scenarios, we make the assumption that root access has been granted and all our 
commands reflect this situation. 

Table 4-1 shows the information required for the target host. 


Table 4- 1 Variables required for the commands 


Variable description 

Variable value 

Target host user name 

root 

Target host password 

password 

Target host IP address 

9.42.171.114 


4.5.1 Downloading the software 

IBM Image Construction and Composition Tool is obtained by downloading it from IBM. The 
link for the download is on the Welcome window of the IBM Workload Deployer 
user interface. 

1 . Log on to the IBM Workload Deployer appliance. 

2. Enable the Foundation Pattern type by clicking Cloud Pattern Types -» Select 
Foundation Pattern Type 2.O.O.O. Click Enable. This action is a requirement for IBM 
Image Construction and Composition Tool. 
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3. Select the Welcome tab (Figure 4-20) and then select the Download IBM Image 
Construction and Composition Tool option. 



Figure 4-20 Highlights the option to download IBM Image Construction and Composition Tool 


4. Accept the License agreement and save the IC0N_install_Linux_<versior7 number >. zip 
file into a local folder on your hard disk drive. 


4.5.2 Preparing your Linux host for installation 

The following steps are necessary to prepare your Linux host for installation: 

1 . Open the terminal client on your workstation and use Secure Shell (SSH) to connect to the 
Linux host on which you want to deploy the software: 

ssh rootQtarget_host 

2. You are prompted for the password for the user name. Enter the password and 
press Enter. 

3. Change the directory to root and make a working software directory where you copy the 
necessary installation files into: 

cd / 

mkdir software 

4. Open a new terminal session on your workstation and browse to the local directory on 
your workstation that holds the compressed file for the IBM Image Construction and 
Composition Tool software. 
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Substitute for the value shown in the example the full path and directory to where you 
have the software located locally. Perform a directory listing to ensure that the directory 
contains the file similar to the one listed in Table 4-2: 


cd /ICON_ImageCreation/downloadedImage/ 
Is 

Table 4-2 Software installation files 


Software file name 

Software description 

I C0N_I ns tal l_Li nux_reZ ease . zi p 

Compressed file containing the IBM Image 
Construction and Composition Tool installation 
files. This compressed file also contains the 
necessary media to perform a GUI installation. 
Release refers to the release number of the 
software. 


5. Next, run scp or ftp to download the files to your target host. In this example, we issue a 
scp command to copy the file in the downloaded Image directory into the target host’s 
software directory. You are prompted for your password on the target host. Enter the 
password and press Enter. 

When the file copy completes, issue the 1 s command on the target host to confirm you 
have the necessary file”: 

Is 

scp ICON_Instal l_Linux_l. 1.0. 836. zip root@target_host : /software 

6. Create a temporary directory under /software called i con. This directory is where you 
expand the IBM Image Construction and Composition Tool binary file in preparation for 
the installation. Run the following commands to accomplish this task: 

Is 

mkdir icon 

7. Run the following command to extract the IBM Installation Manager and IBM Image 
Construction and Composition Tool installation repositories. Run both these commands 
from within the /software directory. 

unzip IC0N_Install_Linux_1.1.0.836.zip -d icon 


4.5.3 Installing the software silently 

The next step is to install IBM Installation Manager and then IBM Image Construction and 
Composition Tool. 

1 . Install IBM Installation manager by completing the following steps: 

a. Use the vi text editor from the command line to edit the IBM Installation Manager 
response file, install, xml. Run the following steps: 

cd icon 

vi install. xml 

b. Remove the following lines: 

<repository location=’icon ’/> 

<of feri ng i d= ’ com. i bm .cloud . i con ’ /> 

c. Save and quit: 

:q! 
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d. Issue the install command: 

./installc -acceptLi cense 

e. After the software installs successfully, you are returned to the same directory. Look for 
the output message that indicates the location of IBM Installation Manager. This 
message signifies a successful installation. 

2. Next, use the vi text editor to prepare the XML response file for IBM Image Construction 
and Composition Tool. 

a. Open the file for edit by running the following commands: 

cd /software/icon/icon 

vi i con_si 1 ent_i nstal l_response_fi 1 e.xml 

b. Edittheicon silent install response fil e.xml by replacing the values outlined in 
Table 4-3. 

For the scenarios in this book, you need to only change the repository location and the 
product installation location. For the rest of the response file, keep the default values. 

Optionally, you can change the default user name and password. After you change the 
password, you must re-encrypt it again. Details about these field values and the steps to 
perform these tasks can be found within the product’s readme file, which is shipped with 
the installation media. 


Table 4-3 Values to be replaced within the silent installation XML response file 


XML element 

Value 

Description 

<reposi tory 

location^ "/path/to/ icon_im 
Repository" /> 

/software/i con/i con 

Path to the extracted IBM 
Image Construction and 
Composition Tool Installation 
Manager repository location. 

<profile id= 11 Image 
Construction and 
Composition Tools" 
i nstal 1 Locati on="/opt/IBM/ 
icon"> 

/opt/IBM/icon 

Path to the product installation 
location. 
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Figure 4-21 shows the updated file. 


<?xml version="l. 0" encoding="UTF-B"?§ 

< ! — The "acceptLicense" attribute has been deprecated. Use 


-acceptLicense" command line option to accept license agreements.- — 


value= 1 admin 1 /> 

value= 1 f uf gZbY47Ef xLYa rBAIxeQ== 1 

value= 1 f uf g.ZbY47Ef xLYarBAIxeO== "/> 


<agent-input accept License='true’> 

<server> 

|< repository location= Vsof tware/icon repository Y> | 

'</server> 

|<profile id=‘ Image Construction and Composition Tools' installLocation= Vopt/IBM/icon '>| 

<data key= ' eclipseLocation ' value= ' /opt /IBM/icon ' /> 

<data key= 1 user. import . prof ile 1 valuer" false V> 

<data key= 1 cic. selector. os 1 value= 11 linux ' /> 

<data key= 1 cic. selector. ws 1 value= 1 gtk '/> 

<data key= 1 cic. selector. arch 1 value= 1 xB6 '/> 

<data key=' user. username, com. ibm. cloud. icon' 

<data key=' user. password, com. ibm. cloud. icon 1 
<data key= 'user. confirmPassword, com. ibm. cloud. icon 1 
<data key= 1 cic. selector, nl 1 value='enY> 

</prof ile> 

^install modif y= ' false '> 

^offering id= ' com. ibm. cloud. icon ' p rofile= ' Image Construction and Composition Tools' features= ' icon_core 4 
</i,nstall> 

-^preference name='com.ibm.cic. common. core. preferences. eclipseCache' value= Vopt/IBH/IBMIHShared ' /> 
<preference name='com.ibm.cic. common. core. preferences. connectTimeout' value= ' 30 '/> 
preference name='com.ibm.cic. common. core. preferences. readTimeout' values" 4.5 */> 
preference name='com.ibm.cic. common. core. preferences. downloadAutoRetryCount' value= ' 0 ' /> 
preference name= ' offering. service. repositories. areUsed 1 value=* true "/> 

<preference name='com.ibm.cic. common. core. preferences. ssl.nonsecureM ode ' value=* false "/> 

preference name='com.ibm.cic. common. core. preferences. http.disablePreemptiveAuthentication' value=' false '/> 
preference name= ' http. ntlm. auth. kind 1 value= 'NTLM ' /> 

preference name=' http. ntlm. auth. enableln teg rated. Win32 1 value=‘ true '/> 

<preference name='com.ibm.cic. common. core. preferences. preserveDownloadedArtifacts 1 value- 4 true 4 /> 
preference name='com.ibm.cic. common. core. preferences. keepFetchedFiles' values" false "/> 
preference name= ' PassportAdvantagelsEnabled 1 values 4 false "/> 

preference name='com.ibm.cic. common. core. preferences. searchForUpdates' value=' false 1 /> 

<preference n am e= ' com. ibm. cic. agent. ui.displaylnternalVersion" value= ' false '/> 

<preference name='com.ibm.cic. common. sharedUI.showErrorLog' value= ' t rue 1 /> 

<preference name='com.ibm.cic. common. sharedUI. showWa rningLog ' value='true'/> 

<preference name='com.ibm.cic. common. sharedUI. showNoteLog ' value= ' true '/> 

</agent-input> 


installFixes= ' none 1 /> 


Figure 4-21 Copy of edited icon_silent_instali_response_file.xmi file with changes highlighted in red 


3. After the icon_silent_install_response_file.xml file is edited and saved, run the 
following IBM Installation Manager command to perform the installation of the IBM Image 
Construction and Composition Tool software: 

/opt/ IBM/ 1 ns tal 1 ationManager/ecl ipse/ tool s/imcl input 

/software/i con/i con/i con_si 1 ent_i nstal l_response_fi 1 e. xml -acceptLi cense 

When specifying the path to the response file, ensure that the full absolute path is 
specified and not just the path from the directory in which you are running the installation. 
We also specify the full path to the IBM Installation Manager installer. 

Figure 4-22 shows the command and the response. 


[root@rcc-pok-idg-2210 tools]# /opt/IBM/InstallationManager/eclipse/tools/imcl input /software/i conreposi tory 

/ i con_si 1 ent_i nstal l_response_fi 1 e . xml -acceptLi cense 

Installed com. ibm. cloud. icon_l. 1.0. 30 to the /opt/IBM/icon directory. 

[root@rcc-pok-idg-2210 tools]# 

Figure 4-22 Output from the successful completion of the silent installation 


4.5.4 Starting and stopping IBM Image Construction and Composition Tool 

Starting and stopping the tool is performed by scripted commands issued from the command 
line. This mechanism is the only way to start or stop the software. 
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Complete the following steps: 

1 . Open a terminal window to the host on which you deployed the software. 

2. Change to the root directory into which the software was installed by running the 
following command: 

cd /opt/IBM/icon 

3. The start. sh and stop.sh scripts are used to start and stop the tool. Issue the start 
command to validate that the tool can start and is operational: 

. /start. sh 

Figure 4-23 shows the command issued to start the tool 


[root@rcc-pok-idg-2210 /]# cd /opt/IBM/icon 
[root@rcc-pok-idg-2210 icon]# Is 

configICON.sh ibm-java-i386-60 icn.app instal 1 ICON.sh license setupICON.sh start. sh stop.sh 
[root@rcc-pok-idg-2210 icon]# . /start. sh 

Application started and servicing requests at http://l ocal host: 8080/ https://localhost: 443/ 
CWPZT0600I: Command start was successful 
Done start. sh 

[root@rcc-pok-idg-2210 icon]# ./stop.sh 
Application status is STOPPED 
CWPZT0600I: Command stop was successful 
Done stop.sh 

[root@rcc-pok-idg-2210 icon]# . /start. sh 

Application started and servicing requests at http://l ocal host: 8080/ https : //I ocal host : 443/ 

Done start. sh 

[root@rcc-pok-idg-2210 icon]# 


Figure 4-23 Output of commands showing the successful start and shutdown of the tool 


4.5.5 Logging in for the first time and creating a cloud provider 

After the tool is running, you access it using a web browser. The optimum screen resolution 
for viewing the tool browser interface is 1024 by 768. The supported browser types are: 

► Mozilla Firefox 3.6 and above (in our scenario, we used V7.0.1) 

► Microsoft Internet Explorer v7.x and v8.x 

To log in and create a cloud provider, complete the following steps: 

1 . To access the tool interface, enter the following URL in your browser using the IP address 
of the host on which you installed the tool: 

https : / /host/ i cn/ui 
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2. You might be prompted to accept the certificate depending on the browser you are using 
and the browser’s security settings. Accept all the certificates and you are presented with 
the tool login window (Figure 4-24). 


IBM Image Construction and Composition Tools 


User name: 
Password: 



© Copyright IBM Corporation 2011. All Rights Reserved. 

Figure 4-24 Tool login window 


3. At the User name: and Password: prompts, enter the default values shown in Table 4-4. 
Table 4-4 User name and Password values for the tool console 


Field label 

Value 

User name: 

admin 

Password: 

password 


If this time is the first time you access the tool instance, you see a Create new cloud 
provider welcome window (Figure 4-25). This window is the start of a wizard that guides 
you through the setup of your cloud provider. 


Create new cloud provider 

Welcome > General > Credentials > Cloud details > Summary 

This wizard will walk you through the process of defining a new cloud provider. 
Press 'Next' to move to the next step. 


Previous 


Next 


Cancel 


Figure 4-25 Create new cloud provider wizard Welcome window 
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Table 4-5 lists the values you need to complete the cloud provider setup. Click Next to 
begin the cloud provider creation. 


Table 4-5 Values required to complete the cloud provider setup 


Field label 

Value in the ITSO lab 

Description 

Name 

IWD-Scenario Instance 

Descriptive name for the cloud 
provider. This name can be 
any custom name. 

Description 

This item is the IWD instance 
used for the scenarios. 

Detailed description of the 
cloud provider type. 

Cloud Provider Type 

IBM Workload Deployer 

The cloud provider you are 
going to connect to. 

Hostname 

iwd.itso.ral .ibm.com 

Host name or IP address of 
the IBM Workload Deployer. 

Username 

cbadmin 

User name to log in with on the 
IBM Workload Deployer. 

Password 

password 

Password for the user. 


4. In the Create new cloud provider - General window (Figure 4-26), use the values from 
Table 4-5 to complete the Name and Description fields. Select IBM Workload Deployer 
as the Cloud provider type. Click Next. 


Create new cloud provider 


Welcome > General > Credentials > Cloud details > Sum 


Please specify a name and description of the connection 


IWD-Scenario Instance 


Previous Next Cancel 


Figure 4-26 General settings for the new cloud provider type 


This is the IWD instance used for the scenarios. 


[IBM Workload Deployer 


Name: 

Description: 

Cloud Provider 
Type: 
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5. On the next window (Figure 4-27) complete the Host name, Web Ul User Name, and Web 
Ul Password fields using the value from Table 4-5 on page 105. 


IWD-Scenario Instance 

General 

General Properties 

Name: 

Description: 

Host name: 

Type: 

Web Ul User Name: 

Web Ul Password: 

< 


y x 


IWD-Scenario Instance 


iwd.itso.ral.ibm.com 


IBM Workload Deployer 


cbadmin 



> 


- 


Figure 4-27 General tab for the cloud provider 


6. Click the Save button in the upper right of this window to save these details. It is at this 
stage that your IBM Image Construction and Composition Tool creates a connection to the 
IBM Workload Deployer instance. A validation check against the provider is performed, 
validating the credential information that was provided. 

7. After the connection to your cloud provider is saved and validated, you see the newly 
created cloud provider IWD-Scenario Instance in the Cloud Providers pane on the 
left side. 
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Scenario overview and 
prerequisites 


This book illustrates two common scenarios for the use of IBM Image Construction and 
Composition Tool and IBM Workload Deployer. This chapter provides an overview of these 
scenarios and the base prerequistes common to both. 

This chapter contains the following topics: 

► Scenario overview 

► Scenario prerequisites 


© Copyright IBM Corp. 2012. All rights reserved. 
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5.1 Scenario overview 


This book uses two simple and representative scenarios to illustrate the power of using IBM 
Image Construction and Composition Tool to create custom virtual images for use with 
IBM Workload Deployer. 

The scenarios combine existing images with custom content created using IBM Image 
Construction and Composition Tool. In one scenario, the existing image is a customized 
VMware virtual machine on a VMware ESX Hypervisor external to the cloud. In the second 
scenario, an image from IBM Workload Deployer is used as the starting point. In both cases, 
the resulting custom image is incorporated into a virtual system pattern in the IBM Workload 
Deployer and deployed to the cloud to create a highly customized virtual system. The virtual 
system pattern can then be repeatedly provisioned in a self-service manner, cutting operating 
costs while improving time to value. 

These examples show the process for customizing images. You can take this process and 
modify it for your own use. 


5.1.1 Scenario: Bring your own operating system 

In most organizations, a corporate standard exists for security compliance across hardware 
and software platforms. This requirement is often non-negotiable, so although IBM Workload 
Deployer comes with a base operating system image and pre-built Hypervisor Editions, these 
assets do not meet unique corporate standards. With the release of IBM Workload Deployer 
V3.1 and IBM Image Construction and Composition Tool, it is now easy to capture existing 
corporate approved images and deploy them with IBM Workload Deployer. 

This scenario illustrates the process to import customized images as deployable images by 
IBM Workload Deployer. This scenario imports a corporate approved image from a VMware 
ESX Hypervisor into IBM Image Construction and Composition Tool and exports it for use in 
the IBM Workload Deployer. 


5.1.2 Scenario: Customizing with third-party software 

IBM Workload Deployer does not include third-party product images as pre-loaded images by 
default. However, with IBM Image Construction and Composition Tool, you can create a 
bundle to customize an image with additional software and configuration tasks. The image 
can then be sent to IBM Workload Deployer to use in virtual system patterns. 

This scenario illustrates the process of packaging non-IBM software (Apache Tomcat in this 
case) with a base operating system image to create a customized deployable image for use 
by IBM Workload Deployer. 

Installing and customizing software products can present challenges when designing custom 
images for repeated deployment. For example, consider a product that requires 
server-specific parameters, such as a host name, to be configured with each deployment into 
the cloud. This scenario shows how IBM Image Construction and Composition Tool is used to 
set these configuration parameters. 
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5.2 Scenario prerequisites 

The prerequisites outlined here are required for all scenarios and are assumed to be in place 
before beginning the scenarios. Additional requirements specific to each scenario are 
covered in the appropriate scenario chapter. 

The following list itemizes the basic requirements for the scenarios: 

► An IBM Workload Deployer appliance with the cloud configured. 

► Red Hat Linux Enterprise Server Edition 64-bit V5 operating system with IBM Image 
Construction and Composition Tool installed. 

► Scripts for the installation and configuration tasks that you upload into the IBM Image 
Construction and Composition Tool 


Chapter 5. Scenario overview and prerequisites 
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Scenario 1 : Bring your own 
operating system 


This chapter outlines the steps to establish an operating system image for use in IBM 
Workload Deployer virtual system patterns that meets corporate objectives and standards. 

This chapter contains the following topics: 

► Business value 

► Scenario overview 

► Scenario prerequisites 

► Scenario steps 
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6.1 Business value 


Corporate governance of operating systems is a non-negotiable requirement for enterprise. 
Security exposures created enormous costs for the enterprise. Although IBM ships base 
operating system images on the IBM Workload Deployer appliance, these images might not 
meet the specific requirements of some enterprises. The combination of IBM Image 
Construction and Composition Tool and IBM Workload Deployer provides a path to create a 
base operating system image that meets corporate standards. This situation ensures that all 
the systems that support the business are based on this corporate standard image. 


6.2 Scenario overview 

This scenario illustrates the process to capture a base operating system image with IBM 
Image Construction and Composition Tool. Red Hat Enterprise Linux V5 is the base 
operating system used in this example. After the image is captured, it is exported from IBM 
Image Construction and Composition Tool in OVF-compliant format, which can then be 
imported into the IBM Workload Deployer virtual image catalog. The image is deployed in a 
virtual system pattern to validate that the image has gone end to end through the process. 

The process for capturing an existing virtual machine to use in an IBM Workload Deployer 
virtual system pattern is shown in Figure 6-1. 


IBM Image Construction 
and Composition Tools 



Image 

(0 Import the image \ £ atalo 9 ^ 

Export the base image 0 Deploy the image to the cloud 


(T) Capture (import) the base virtual machine 


I 


^ @ Build a customized base virtual machine 

o 



Figure 6-1 Capturing an existing base image for deployment 


112 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 


The steps are: 

1 . Create a certified base virtual machine. 

Create a VMware virtual machine with the enterprise certified operating 
system installation. 

2. Capture the running virtual machine. 

Capture a running instance of the virtual machine from VMware into IBM Image 
Construction and Composition Tool. 

3. Export the image as an OVA file. 

Export the captured base image as an OVA file formatted for IBM Workload Deployer 
V3.1 . 

4. Import the OVA file. 

Import the OVA file into the IBM Workload Deployer V3.1 virtual image catalog. 

5. Create the virtual system pattern using the imported image. 

6. Deploy the virtual system pattern from IBM Workload Deployer to the cloud. 

7. Verify the virtual image deployment. 


6.3 Scenario prerequisites 

This scenario requires the following prerequisites: 

□ Base operating system: 

- VMware virtual machine. 

This item is the virtual machine that is captured as an image. See 6.3.1, “Base 
operating system virtual machine requirements” on page 1 14 for more details. 

- A VMware Hypervisor that hosts the VMWare virtual machine. 

See 6.3.2, “VMware hypervisor requirements” on page 1 14 for more details. 

□ A Linux system with the following software installed: 

- IBM Image Construction and Composition Tool. 

The tool is used to capture the base operating system image and convert it to an IBM 
Workload Deployer compliant OVA. For installation information, see 4.5, “Installing and 
configuring IBM Image Construction and Composition Tool” on page 98. 

- IBM Workload Deployer CLI. 

See Chapter 14, “Managing virtual applications from the command-line interface” on 
page 325 for instructions about downloading and installing this interface. 

- Java 1 .6 (a prerequisite for the CLI) 

□ IBM Workload Deployer V3.1 

A cloud group, called Default ESX Group, is used for deploying the virtual system. You 
must be able to log on to the IBM Workload Deployer appliance with the appropriate 
access level to import images, and to create and deploy patterns. 

□ IBM Workload Deployer Cloud Provider defined in the IBM Image Construction and 
Composition Tool 
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6.3.1 Base operating system virtual machine requirements 


It is common for organizations to have an established process for building base operating 
system images that meet enterprise guidelines. You can import these images into IBM Image 
Construction and Composition Tool if they meet the following criteria: 

□ Uses one of the following tested operating systems: 

- Red Hat Enterprise Linux V5.4, V5.5, V6.0, or V6.1 

- SUSE Linux Enterprise Server V1 1 .1 

□ Network Manager is disabled or uninstalled. 

□ SELINUX is set to permissive or disable. 

□ VMware tools are installed on the virtual machine. 

□ SSH is enabled. 

□ A SCSI disk type is used. (IDE disk type is not supported.) 

□ A single network interface is defined. (Multiple network interfaces are not supported.) 

□ The virtual machine must not contain snapshots. 

□ The virtual machine must not contain delta disks. 

□ Has D I S K_NAM E_MUST_N0T_C0NTA I N_S PACES . vmd k . 

□ The file system type must not be ext4. 

6.3.2 VMware hypervisor requirements 

A VMware hypervisor is required to host the initial running instance of the base operating 
system image and during the validation of the deployment from IBM Workload Deployer. For 
this scenario, it is acceptable for the hypervisor to serve both purposes. 

For detailed system requirements, see the available product documentation. IBM Workload 
Deployer system requirements can be found at the following address: 

http://www. i bm.com/software/webservers/workl oad-depl oyer/requi rements/i ndex.html 

VMware ESX V4.0 and V4.1 are supported by both IBM Image Construction and Composition 
Tool and IBM Workload Deployer. 


6.4 Scenario steps 

In this scenario, a custom virtual machine is captured in IBM Image Construction and 
Composition Tool and then exported for use in virtual system patterns built in the IBM 
Workload Deployer. The scenario involves the following steps: 

► Defining the VMware ESX cloud provider 

► Creating an image from a running virtual machine 

► Exporting the image as an OVA file 

► Importing the OVA file into IBM Workload Deployer 

► Creating a virtual system pattern with the new image 

► Deploying the virtual system pattern 

► Verifying the virtual image deployment 
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6.5 Defining the VMware ESX cloud provider 


The IBM Image Construction and Composition Tool needs to have network access to the 
supported VMware hypervisor where the base operating system is running. 

Before you begin: You need the following information (related to the cloud) to define the 
VMware ESX Cloud Provider: 

► ESX root Password: <ESX_ROOT_PASSWORD> 

► ESX server address: <ESX_ADDRESS> 

► Subnet address: <ESX_SUBNET> 

► Netmask: <ESX_NETMASK> 

► Gateway: <ESX_GATEWAY> 

► Primary DNS: <ESX_P_DNS> 

► Secondary DNS (Optional): <ESX_S_DNS> 

► Static IP (Minimum of 1): <IP> 


To define the ESX cloud provider in IBM Image Construction and Composition Tool, complete 
the following steps: 

1 . Click Administer -» Manage Cloud Providers. Then click + to create a cloud provider 
(Figure 6-2). This action starts the Create new cloud provider wizard. 



Figure 6-2 New cloud provider 
2. In the Welcome window, click Next. 


Chapter 6. Scenario 1 : Bring your own operating system 


115 



3. In the General setting window, enter the following values (Figure 6-3) and then click Next: 

- Name: VMware Hypervisor. 

- Cloud Provider Type: VMware ESX. 



Figure 6-3 Cloud Provider wizard - Step 2 

4. In the Credentials window, enter the following values (Figure 6-4) and click Next: 

- User Name: root. 

- Password: <ESX_ROOT_PASSWORD>. 

- ESX server address: <ESX_ADDRESS>. 


Create new cloud provider 


Welcome > General > Credentials > Cloud details : 


Please enter cloud credentials 


root 


blade 10.itsQ.ral.ibni.com| 


Previous Next Cancel 


Figure 6-4 Cloud Provider wizard - Step 3 


User Name: 

Password: 

ESX server 
address: 
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5. In the Cloud details window, enter the information required to access the hypervisor with 
the running operating system and click Next. 

- Deployment network name: Select the appropriate Network from the menu, in this 
case, VM Network. 

- Data store: Select the data store with the running operating system image. 

- Subnet address: <ESX_SUBNET>. 

- Netmask: <ESX_NETMASK>. 

- Gateway Address: <ESX_GATEWAY>. 

- Primary DNS: <ESX_P_DNS>. 

- Secondary DNS: <ESX_S_DNS>. 

- IP Addresses: <IP>. 


IP addresses: Although it is not actively used for this scenario, the IBM Image 
Construction and Composition Tool requires at least one IP address to define an 
ESX Cloud Provider, as shown in Figure 6-5. 



Figure 6-5 IP address requirement 


Chapter 6. Scenario 1 : Bring your own operating system 


117 




In this scenario, the values shown in Figure 6-6 are entered. 


Create new cloud provider 


Welcome > General > Credentials > Cloud details > Summary 


Data store: 

Subnet 

address: 

Netmask: 


Gateway 

Address: 


Primary DNS: 


Secondary DNS: 


VM Network 


datastore2 - https://bladelO.itso.ral.ibm.eom/sdk#Dat ▼ 


9.42.170.0 


255.255.254.0 


9.42.170.1 


9.42.170.15 


Deployment IP Addresses: enter addresses or address ranges 


IP Address Range Begin 

IP Address Range End 


9.42.171.4S 


n 


Previous Next Cancel 


© 


Please select or enter the details that will be used to deploy and build images, j > 


Deployment 
network name: 


Figure 6-6 Cloud Provider wizard - Step 4 
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6. The Summary window (Figure 6-7) provides a review of the values you entered in the 
wizard. Click Done. 


Create new cloud provider 


Welcome > General > Credentials > Cloud details > Summary 


Review the cloud connection wizard input 

VMware Hypervisor 

VMware Hypervisor with running operating 
system instance. 

bladelO.itso.ral.ibm.com 
VM Network 

https://bladelO.itso.ral.ibm.com 
/sdk£Datastore#4d54411a-6487fafB-56da- 

Pdlfl ^7sqnnft 


9.42.170.0, 255.255.254.0, 9.42.170.1, 
9.42.170.15, 


Press "Done" to create cloud connection. 


Previous Done Cancel 


Figure 6-7 Cloud Provider wizard - Step 5 


Name: 

Description: 

VMWare 

Host: 

Deployment 

Network: 

Datastore: 

Deployment 

Details: 


As a result of the wizard, the VMware Hypervisor is successfully added and can be seen 
in the list of cloud providers (Figure 6-8). 


IBM Image Construction 

and Composition Tools 

Welcome Images 

Administer 


Cloud Providers 

% # 

VMware Hypervisor 

VMware Hypervisor 

Eg. 

General Network 



General Properties 


Figure 6-8 Cloud Provider defined 


6.6 Creating an image from a running virtual machine 

Begin by starting the base operating system virtual machine described in the scenario 
prerequisites on the VMware hypervisor. 


Base operating system consideration: If problems occur in the image capture process, 
the base operating system VMware virtual machine in VMware ESX should not be the 
original, but instead an exact copy. If you choose to use the original, proceed at your 
own risk. 
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For the next step, note the following base operating system VMware attributes: 

► Virtual machine address <VM_ADDRESS> 

► Virtual machine root password <VM_PASSWORD> 

The next step is to capture the running virtual machine into IBM Image Construction and 
Composition Tool. Complete the following steps: 

1 . Click VMware Hypervisor in the Cloud Provider drop-down menu (Figure 6-9). 


Logout I Help ” 


Cloud Provider: 


All Cloud Providers 
VMware Hypervisor 


to 


Figure 6-9 Select Cloud Provider 


2. From the menu bar, click Images -» Build images (Figure 6-10). 


IBM Image Construction and Composition Tools 

Welcome 

IffiEERS Administer 


Images 

| Build images ^ 

MlllbM.UBIB_U.IIJM 

Enterpri; 

[Type search text. . . 

Search 

Descriptic 

® All Any 





Universal 


Figure 6-10 Browse to the image build menu 


3. Click the + icon to start the Create a new image wizard. 

4. Click Create Image from running VM -» Proceed (Figure 6-1 1 ). 


Create a new image 


(D 

How do you want to create your image? 


O Create Image from template 

■ image 


0 Create Image from running VM 



Proceed 

Cancel 



Figure 6-11 Create an image from a running VM 
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5. Enter the following values (Figure 6-12) and click Create: 

- Name: Enterprise_Certified_RHEL_5_x8664_25GB 

- Universal ID: com. enterprise. certified. rhel. 5. x8664.25gb 

- Version: 1.0.0 

- Description: Enterprise certified image. 

- IP Address: <VM_ADDRESS> 

- User ID: root 

- Password: <VM_PASSWORD> 


Import Images from Running VM 

Please enter required fields 


Name: 

Universal ID: 

Version: 

Description: 


IP Address: 


User ID: 


Password: 


Enterprise_Certified_RHEL_5_x8664_25GB 


com. enterprise. certified, rhel. 5.x8664.25gb 


1.0.0 



9.42.171.140| 


root 


cr g 


Cancel 


Figure 6-12 Information needed to access the running VMWare image 
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6. The image is copied to the IBM Image Construction and Composition Tool repository. The 
time it takes to import the image varies by image size and network. Check the image 
status to monitor the progress (Figure 6-13). 



Figure 6-13 Import in progress 


Reset of the virtual machine instance: The running virtual machine instance is reset 
shortly after Import begins. This action can be seen when monitoring the Console through 
a VMware vSphere Client (Figure 6-14). 


un communication interface:! 

Removing vmci 

device 




Resetting vmci device 







Unregistered vmci device. 







ACPI: PCI interrupt for device 

0000:00:07.7 

disabled 








1 

OK 

1 





1 

OK 

1 

Starting k i 1 la 1 1 : 




1 

OK 

1 

Sending all processes the 

TERM 

s igna 1 . . . 


1 

OK 

1 

Sending all processes the 

KILL 

s igna 1 . . . 


1 

OK 

1 

Saving random seed: 




1 

OK 

1 

Syncing hardware clock to 

system time _ 






Figure 6-14 VMware vSphere Client panel 
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When the status is “Completed”, the image is captured successfully (Figure 6-15). 


IBM Image Construction and Composition Tools 


Logout 1 

Help ^ 

Welcome Images 

Administer 


Cloud Provider: 


HD 

Images % 

# i,& 

Enterprise_Certified_ 

_RHEL_5_x8664_25GB Completed | / @) | % 

1 

td | X 

{Type search text... 

Search 

Description: 

Enterprise_Certified_RHEL_5_x8664_25GB 



(•) All O Any 


Universal ID: 

com.enterprise.certified.rhel.5.x8664.25gb 



Enterprise_Certified_RFIEL_5_ 

x8664_2... fcj 

Version: 

1.0.0 

b 





Extends Image: 





Image Status: 

® Completed 





Created on: 

Tue Nov 15 2011 02:09:51 GMT-0600 (Central Standard Time) 





Updated date: 

Tue Nov 15 2011 02:09:51 GMT-0600 (Central Standard Time) 





Operating System: 

Linux Red Flat Enterprise Linux (RFIEL) 

Activation Framework: Not found. 





Cloud Provider: 

VMware Flypervisor 





► Software Bundles: 






► Products: 






► Flardware: 





Figure 6-15 Import has completed 


6.7 Exporting the image as an OVA file 

To export the captured base image as an OVA formatted file for IBM Workload Deployer 
V3.1 , complete the following steps: 

1 . Click the Export as OVA button (Figure 6-16). 



Figure 6-16 Export the image as an OVA file 
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2. Enter the following information to describe where the image should be exported to and 
click OK (Figure 6-17): 

- Remote host: Use a system with enough storage to hold the file. The host must support 
Secure Copy (SCF). 

In this example, the file is exported to the Linux operating system that is hosting IBM 
Image Construction and Composition Tool. 

- Destination folder: The folder to store the file in. 

- Authentication Method: Select the method used to authenticate with the host storing 
the file. In this case, Password is selected, and the User name and Password fields are 
activated to hold the authentication information. 

- User name: The User ID used to access the system storing the file. 

- Password and Verify password: Password for the user ID. 

- OVA file format: Click IBM Workload Deployer 3.1 (or higher), VMWare Virtual 
Center from the drop-down menu. 


Export image as OVA 

To what location should the image be exported? 

The destination host must support SCP (Secure Copy) 


Remote host: 9.42. 1 7 1 . 1 14 


Destination folder: dr outer 


Fi I e n a m e : c om. enterpris e . c ertifie d.rheL 5 .xS 6 64 . 2g 



OK Cancel 


Figure 6-17 Enter the information required to store the OVA file 
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3. Click Open the export status (Figure 6-18). 



Figure 6-18 Export image sta tus 
4. Click Refresh to view the updated status (Figure 6-19). 


Task status 

- Export Image 

Image id: 

repositoryId=local8turi=6a2b56f9-47ad-45fa-b7Oe-4Oe8433e6a58&version=l,0,O 

Task id: 

1 

Status: 

Exporting 

i Refre^ 



Figure 6-19 Updated status 


5. The image is exported successfully as an OVA when the Status field is “Ready”. 

6.8 Importing the OVA file into IBM Workload Deployer 

To import the OVA into the IBM Workload Deployer V3.1 virtual image catalog, complete the 
following steps. The import is done using the IBM Workload Deployer CLI from the system 
where the exported OVA file was stored. 

1 . Open a command prompt. 

2. If Java 1 .6 is not set on the system PATH, run export PATH before running the deployer 
commands. For example: 

export 

PATH=/opt/ i bm/java-x86_64-60/bi n/j ava : / opt/ i bm/java-x86_64-60/j re/bi n/ : $ PATH 

3. Change to the directory where you extracted the IBM Workload Deployer Command 
Line Tool: 

cd deployer. cl i /bin 
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4. Start the CLI to connect to IBM Workload Deployer at IP address 9.42.170.220 

(Figure 6-20). The command must specify a user ID and password that are defined at IBM 
Workload Deployer. 

./deployer -h 9.42.170.220 -u icctuser -p password 


[rootOicon bin]# ./deployer -h 9.42.170.220 -u icctuser -p password 
Welcome to the IBM Workload Deployer CLI.. Enter 'help 1 if yon 
need help getting started. 

»>■ 

Figure 6-20 Start the CLI for IBM Workload Deployer 

5. Run the following command to import the OVA: 

depl oyer . vi rtual i mages . create ( 6 /drouter/com_enterpri se_certi f i ed_rhel _5_x8664_2 
5gb_l_0_0.ova 9 ) 

The command and results are shown in Figure 6-21 . 


»> deployer . virtualimages . create ( 1 /drouter/com_enterprise_certif ied_rhel_5_x866 
4_2 5gb_l_0_0 . ova 1 ) 

{ 

"acl": (nested object), 

"advancedoptionsaccepted" : n F n , 

"build": "", 

"created": Nov 16, 2011 6:57:35 AM, 

"currentmessage" : "RM04062", 

"currentmessage_text" : "Downloading virtual image", 

"currentstatus" : "RM01002", 

"currentstatus_text" : "Processing" , 

"description": "", 

"hardware": None, 

"id": 61, 

"license": (nested object), 

"licenseaccepted" : "F", 

"name": "New virtual image 1321448255964", 

"operatingsystemdescription" : None, 

"operatingsystemid" : 0, 

"operatingsystemversion" : None, 

"owner": (nested object), 

"parts": (nested object), 

"pmtype": "Unknown", 

"productids" : (nested object), 

"servicelevel" : "0", 

"updated": Nov 16, 2011 6:57:36 AM, 

"version": "0" 

} 


Figure 6-21 Import the OVA file to IBM Workload Deployer 

6. Log on to the IBM Workload Deployer user interface. 
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7. From the menu, click Catalog Virtual Images. Upon successful import, the image is 
seen in the Virtual Image Catalog (Figure 6-22). 


IBM Workload Deployer 

Welcome Instances Patterns Catalog Reports Cloud System 

Virtual Images 


# 

Enterprise_Certified_RHEL_5_x8664_25GB 

Search... 


n- 

Description: 

Enterprise certified image. 

Activation Failure Test 

*6 


> 

Created on: 

Nov 14, 2011 9:52:46 PM 

DB2 Enterprise 9. 7. 4.0 




Current status: 

Read-only 

DB2 Enterprise 9. 7. 4.0 (PowerVM) 

Ifn 



Updated on: 

Nov 14, 2011 10:03:01 PM 

DB2 Express 9. 7. 4.0 

l!i 



License agreement: 

Accepted [view...] 

E nte rp ri s e_Ce rtif i e d_RH E L_5_x8 6 6 4_2 5 G B 

*6 



Hypervisor type: 

ESX 


Figure 6-22 The new image is listed in the virtual image catalog 


6.9 Creating a virtual system pattern with the new image 

Images are deployed as part of a virtual system pattern. In this step, create a pattern using 
the new image by completing the following steps: 

1 . Click Patterns Virtual Systems (Figure 6-23). 


IBM Workload Deployer 


Welcome 


Instances 


Catalog 


Reports 


Virtual Images 


Virtual Applications 


E nte r p r i se_C ertifi ed_RH E L_5_x8 6 ( 


Search... 

n 

T 

Description: 

Enterp 

Activation Failure Test 

Database S P la y s a ° f virtUal s y stems P atternS ' 1. 




CdLCU UTT. 

TVUV 14 

DB2 Enterprise 9. 7. 4.0 




Current status: 

Re; 

DB2 Enterprise 9. 7. 4.0 (PowerVM) 


!?□ 


Updated on: 

Nov 14 

DB2 Express 9. 7. 4.0 


!?□ 


License agreement: 

|(d Acc 

Enterprise_Certified_RHEL_5_x8664_25GB 

*4 


Hypervisor type: 

ESX 


Figure 6-23 Display the virtual system patterns 
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2. Click + to create a pattern (Figure 6-24). 


IBM Workload Deployer 

Welcome Instances 

Patterns 

Catalog 

Virtual System Patterns 


h- 

Search... 


1 

U New 





Figure 6-24 Create a pattern 


3. Enter the following information to describe the pattern (Figure 6-25) and click OK. 

- Name: Test Enterprise Certified Image. 

- Description: Pattern to verify the enterprise certified image. 

Describe the pattern you want to add. 

* Name: Test Enterprise Certified Image 

Description: A detailed description 

OK I I Cancel ! 

I 

Figure 6-25 Describe the pattern 

4. Click the Edit icon to open the pattern for editing (Figure 6-26). 


Test Enterprise Certified Image 


% |P 

s 

X 

Description: 

None provided 

[Edit] 



Created on: 

Nov 14, 2011 10:04:52 PM 




Current status: 

\$ Draft 




Updated on: 

Nov 14, 2011 10:04:52 PM 




In the cloud now: 

(none) 





Figure 6-26 Edit the pattern 
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5. Navigate through the Parts list to find the part that represents the new image 
(Figure 6-27): 

OS Part 

Enterprise_Certified_RHEL_5_x8664-25GB 


IBM Workload Deployer 

Welcome Instances Patterns Catalog Reports Cloud System 


Pattern Editor Editing Test Enterprise Certified Image 

Search... I_ as t updated on Nov 


Drag and drop 


O OS Part 



Ente rp ris e_Ce rtifi e d_R H EL_5_xS 664_2 .5 G B 



1.0. Or ESXr Red Hat Enterprise Li n lT|c&4- Bit (Red Hat 




- 



Figure 6-27 Find the part that represents the image 


Parts (35/35) 

N Deployment manager 

WebSphere Application Server S. 0.0.1 with Intelligent 
Management Pack 7.0.0 .2 

3.0. 0. 1 r ESX r SLES 11 (Novell SUSE Linux Enterprise Server 

11 ) 

H IBM HTTP servers 

WebSphere Application Server 3. 0.0.1 

8.0. 0. 1, ESX r SLES 11 (Novell SUSE Linux Enterprise Server 

11 ) 

H IBM HTTP servers 

'' WebSphere Application Server 3. 0.0.1 with Intelligent 
Management Pack 7. 0.0, 2 

3.0. 0. l r ESX r SLES 11 (Novell SUSE Linux Enterprise Server 

11 ) 

Ha Job manager 

WebSphere Application Server 3.0.0, 1 

3.0. 0. 1 r ESXr SLES 11 (Novell SUSE Linux Enterprise Server 

11 ) 

Job manager 

WebSphere Application Server 3.0,0. 1 with Intelligent 
Management Pack 7. 0,0. 2 

3.0. 0. 1r ESXr SLES 11 (Novell SUSE Linux Enterprise Server 

11 ) 
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6. Drag the OS Part to the canvas (Figure 6-28). 


Editing Test Enterprise Certified Image 

Deploys to ESX hypervisors. Last updated on Nov 1 


© OS Part 

^ X 

1.0.0 H 



Figure 6-28 Add the new image part to the pattern 

7. Click Done editing (Figure 6-29). 


% 

Done editing 

Ordering 

| Advanced Options 


Figure 6-29 Complete the edit 
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6.10 Deploying the virtual system pattern 


The last step is to deploy the virtual system pattern to the cloud. Complete the 
following steps: 

1 . Click the Deploy in the Cloud... button (Figure 6-30). 


Test Enterprise Certified Image 



% * & a 

X 

Description: 

None provided 


p- 

Deploy in the cloud... 


Created on: 

Nov 14, 2011 10:04:52 PM 



Current status: 

Draft 



Updated on: 

Nov 14, 2011 10:05:33 PM 



In the cloud now: 

(none) 



Access granted to: 

Administrator [owner] 




Add more... 



Topology for this pattern: 




Deploys to ESX hypervisors. 





Figure 6-30 Deploy the pattern to the cloud 

2. Enter a name for the new virtual system (Figure 6-31 ): 
Test Enterprise Certified Image Deployment 


Describe the virtual system you want to deploy. 

|3T Virtual system name: 

Test Enterprise Certified Image Deployr 

Figure 6-31 Name the new virtual system 
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3. Select the environment for deployment. Expand the Choose Environment section. Select 
the IP version and select Choose cloud in cloud group. From the drop-down menu, 
select the cloud group to deploy the virtual system to (Figure 6-32). 


@f 


Choose Environment 
(©IP version: IPv4 

IP version: IPv6 


©Choose cloud 
In cloud 
group 

Choose profile 
Type All 

Profile 




Default ESX group T 


H 

H 


Figure 6-32 Select the cloud group 

4. Expand Configure virtual parts (Figure 6-33). 


Describe the virtual system you want to deploy. 

& 

Virtual system name: 


Test Enterprise Certified Image Deployr 

& 

Choose Environment 

& 

Schedule deployment 

a 

Configure virtual parts 

b 


OK 


Cancel 


Figure 6-33 Configure the virtual parts 
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5. This section contains values used to configure the virtual system. These values include 
the option for the number of virtual processors the system can use, the memory size 
available to the virtual system, and the passwords for the root and virtuser user IDs. Use 
the defaults for virtual processors (1) and the memory size (2048) and enter the 
passwords (Figure 6-34). Click OK. 

- Password (root): <password> 

- Verify password: <password> 

- Password (virtuser): <password> 

- Verify password: <password> 


6 . 


Fill in the required values for this part of the pattern. 

Name: OSNode 

* Virtual CPUs: 1 H 

* Memory size (MB): 2048 

* Password (root): ******** 

* Verify password: •••••••• 

* Password (virtuser): ******** 

* Verify password: •••••••• 


ok j 


Cancel 


Figure 6-34 Enter the values for the virtual system part 

Click OK to deploy the virtual system (Figure 6-35). 


Describe the virtual system you want to deploy. 

& 

Virtual system name: 



Test Enterprise Certified Image Deployr 

& 

Choose Environment 


& 

Schedule deployment 


& 

Configure virtual parts 



& OS Part 



h 0K H 

Cancel 


Figure 6-35 Deploy the virtual system 
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6.1 1 Verifying the virtual image deployment 


Deploying a virtual system can take time. The amount of time depends on many variables, 
including network speed, traffic in the network, the amount of data you are transferring, and 
so on. 

To verify the virtual image deployment, complete the following steps: 

1 . From the IBM Workload Deployer dashboard menu, click Instances — > Virtual Systems 
(Figure 6-36). 


IBM Workload Deployer 


Welcome 


Virtual System 


Instances 


All Instances 


Search... Virtual Applications 

Activation Failure 


Virtual Applications 


Catalog 


+ 

u- 


Reports 


±g_ 


Virtual Appliar] a of virtual systems and the deployed status 

DB2 Enterprise I of them. 


Shared Services 


DB2 Enterprise (Pi 


Databases 


T — — T T b - 


/ 


Figure 6-36 Show a list of virtual system instances 
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2. Select the virtual system instance Test Enterprise Certified Image Deployment 

(Figure 6-37). The Current status field shows the state of the deployment. Monitor the 
status (occasionally clicking the Refresh icon). 



Figure 6-37 Monitor the deployment status 
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When the image is deployed successfully, the status indicates ‘The virtual system has 
been deployed and is ready to use (Figure 6-38). 


IBM Workload Deployer 



X Administrator | 

1 ©Help | 

| About 

Welcome Instances 

Patterns 

Catalog Reports Cloud System 




Virtual System Instances 


Test Enterprise Certified Image Deployment 


* 

□ 


Search... 

ICON cloned vm 1321427381918-1.0.0.2 
Test Enterprise Certified Image Deployment 


U' 

u 

u 


Created on: Nov 14, 2011 10:07:17 PM 

From pattern: Test Enterprise Certified Image 

Using Environment profile: None provided 


Current status: 
Updated on: 
Access granted to: 

Snapshot: 


(♦] History 

[♦] Virtual machines 

\*\ Comments 


Q The virtual system has been deployed and is ready to use 
Nov 14, 2011 11:46:23 PM 

Administrator [owner] 

Add more... 


(none) 


The virtual system has been deployed and is ready to use 

1 total - 1 started 

There are no comments yet 


Figure 6-38 The deployment is complete 
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7 


Scenario 2: Creating images with 
third-party software 


This chapter shows how to create images that contain custom software, in this case, 
third-party software, with IBM Image Construction and Composition Tool. It then shows how 
to send these images to the IBM Workload Deployerfor use in virtual system patterns. 

This chapter contains the following topics: 

► Business value 

► Scenario overview 

► Scenario prerequisites and skills that are required 

► Designing the software bundles 

► Creating the software bundles 

► Importing the base image from IBM Workload Deployer 

► Extending and customizing the image 

► Synchronizing the customized image 

► Verifying that the image is dispensed to the cloud 

► Capturing the customized image 

► Deploying the customized image with IBM Workload Deployer 


© Copyright IBM Corp. 2012. All rights reserved. 
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7.1 Business value 


IBM Workload Deployer provides a set of virtual images for use in virtual system patterns. 
However, it is possible that you need images that contain more than the default set of 
preinstalled software. For example, you might require non-IBM software to support existing 
applications, such as database, security, or web server software. 

You can resolve this issue by creating deployable images with the additional software 
installed. You can create the image with IBM Image Construction and Composition Tool and 
then send it to IBM Workload Deployer for use in virtual system patterns, providing you the 
same rapid deployment features that are available using preinstalled images. 


7.2 Scenario overview 

This scenario illustrates the process to package images with non-IBM software as deployable 
images by IBM Workload Deployer. It uses Apache Tomcat as the example for non-IBM 
software. Figure 7-1 shows the steps to create these images. 


IBM Image Construction 
and Composition Tools 


L. 



r ' 

I Bundle 

Image 

1 Repository 

1 Repository 


© 


Verify the image configuration 


Synchronize the customized image 



IBM Workload 
Deployer 



New! 


ii (© Capture the image 



(T) Extend and customize the image 
(T) Create a software bundle of Apache Tomcat 


© p l an t0 create software bundles 



(7) Deploy the customized image 
with IBM Workload Deployer 


Figure 7- 1 Third-party software with Apache Tomcat 


This scenario includes the following steps: 

1 . Design the software bundles and create the scripts. 

2. Create the bundles with IBM Image Construction and Composition Tool. 

3. Extend and customize the base image with the software bundles using IBM Image 
Construction and Composition Tool. 
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4. Synchronize the customized image using IBM Workload Deployer as the cloud provider. 
The synchronization builds a virtual instance that becomes the prototype of the 
master image. 

5. Verify that the image is dispensed to the cloud, and verify that the installation tasks ran on 
the customized image. 

6. Capture the customized image. 

7. Deploy the new image from IBM Workload Deployer into the cloud, and verify the 
activation tasks. 


7.3 Scenario prerequisites and skills that are required 

This section lists the prerequisites and skills that are required to run this scenario 
successfully. 

□ IBM Workload Deployer V3.1 . 

The base image is imported from IBM Workload Deployer. You must be able to log on to 
the IBM Workload Deployer appliance with the appropriate access level to import images 
and to create and deploy patterns. 

□ A Linux system with IBM Image Construction and Composition Tool installed: 

IBM Image Construction and Composition Tool is used to create the Apache Tomcat 
bundle and to build the Apache Tomcat image. IBM Workload Deployer must be defined 
as the cloud provider in IBM Image Construction and Composition Tool. 

For installation information, see 4.5, “Installing and configuring IBM Image Construction 
and Composition Tool” on page 98. 

□ Software binary files needed to install the products used to customize the base image: 

- The Apache Tomcat binary file in compressed form 

- The IBM Java SDK 1 .6 SR9 FP2 binary file 

To complete this scenario successfully requires the following skills: 

► Knowledge about software bundles 

You need to understand the concept of software bundles, how to create them, and the 
difference between installation and activation tasks. 

► Linux and UNIX experience and scripting 

Although IBM Image Construction and Composition Tool simplifies the overall virtual 
image creation process, you must write bash scripts for the software bundles. 

► Operating skills of virtual environments 

You need knowledge of the virtual technologies that are managed by IBM Workload 
Deployer. At a minimum, you need to understand how to use snapshots (a copy of the 
virtual machine disk file at a certain point in time to recover easily). 

► Operating skills of IBM Workload Deployer 

You need to know how to provide customized images to the cloud using 
IBM Workload Deployer. 
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7.4 Scenario steps 


The scenario has the following steps: 

1 . Designing the software bundles 

2. Creating the scripts 

3. Creating the software bundles 

4. Importing the base image from IBM Workload Deployer 

5. Extending and customizing the image 

6. Synchronizing the customized image 

7. Verifying that the image is dispensed to the cloud 

8. Capturing the customized image 

9. Deploying the customized image with IBM Workload Deployer 


7.5 Designing the software bundles 

First, determine how you install and configure the software by completing the following steps: 

1 . Determine the system requirements for the software that you are installing. 

2. Determine the base image to use. 

3. Determine the tasks that need to be executed at each stage, including the installation, 
reset, and activation tasks. 


7.5.1 Determining the system requirements for the software 

The first step in planning for bundle creation is to determine the system requirements for the 
software that you include in the software bundles. The following list shows the software and 
prerequisites for this scenario: 

► Apache Tomcat Version 7.0.22. 

► IBM Java SDK 1 .6 (6.0) SR9 FP2 

► Red Hat Enterprise Linux V5.x 

► GNU C library V2.3 (gl ibc) and libstdc++.so.5. (Both libraries are already installed in the 
IBM Workload Deployer Image for x86 Systems base image.) 


7.5.2 Determining the base image to use 

You must ensure that you have the correct operating system base images are available to 
import from IBM Workload Deployer. This scenario uses the base image named IBM 
Workload Deployer Image for x86 Systems , which is Red Hat Enterprise Linux (RHEL) V5.7 
(64-bit). 
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7.5.3 Determining the tasks that need to be executed at each stage 

Next, decide what tasks need to be performed and at what stage (install, reset, or activation) 
the tasks need to be executed. In this scenario, the plan to install Apache Tomcat includes 
the following tasks: 

1. Installation tasks 

a. Install IBM Java SDK. 

Apache Tomcat runs on the Java environment, so the IBM Java SDK installation task 
must be run before the Apache Tomcat installation task. In this task, run the binary file 
to install. 

b. Install Apache Tomcat. 

Extract the Apache Tomcat files. 

c. Configure Tomcat (create the RunAs user, enable SSL, and so on). 

This scenario assumes that Apache Tomcat runs as a non-root user. It also assumes 
that it is necessary to enable SSL. 

In this task, create TomcatUser to be specified as the RunAs user for Tomcat. Change 
the file ownership to run Apache Tomcat as a non-root user, and configure <Apache 
Tomcat tfome>/server.xml . In addition, generate a self-signed certificate (SSL 
certificate) to enable SSL. 

2. Reset tasks 

a. Delete temporary files that are created during the installation tasks, and clean up the 
Apache Tomcat log files because these files are unnecessary for a future deployment. 

b. Delete the temporal SSL certificate that is generated during the installation tasks. 

3. Activation tasks 

a. Change the host name information in server. xml . 

Tomcat keeps host name information in <Apache Tomcat Home>/ server. xml . 

b. Generate a new SSL certificate (self-signed certificate) 

The host name is included in the common name (CN) field of the SSL certificate. 
Because the SSL certificate is generated during the installation tasks, a host name 
collision occurs at deployment time because the host name set at deployment is 
different from the host name used during the installation tasks. The host name collision 
has no impact on HTTPS services, but the certificate is regenerated to avoid 
the collision. 

c. Start Apache Tomcat. 


7.6 Creating the scripts 

The next step is to write the scripts to create software bundles. The scripts for this scenario 
are as follows: 

► Installation tasks: i nstal 1 . sh 

- Usage: This script installs the Apache Tomcat binary files. The full script can be seen 
in “install.sh” on page 386. 

install. sh -JDK_PATH ${ JDKPATH} -JDK_FILE ${JDK_FILE) -T0M_PATH ${T0M_PATH} 
-T0M_FILE ${T0M_FI LE } -RUNASJJSER ${RUNAS_USER) 
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- Arguments: 

• JDK_PATH: The installation path of IBM Java SDK 

• JDK_FILE: The name of the binary file of IBM Java SDK 

• T0M_PATH: The installation path of Apache Tomcat 

• T0M_FILE: The name of the binary file of Apache Tomcat 

• RUNASJJSER: The user name which operates Apache Tomcat 

► Activation Tasks: startup. sh 

- Usage: This script performs post-installation tasks. The full script can be seen in 
“startup.sh” on page 391. 

startup. sh -JDK_PATH ${ JDKPATH} -T0M_PATH ${T0M_PATH} 

- Arguments: 

• JDK_PATH: The installation path of IBM Java SDK 

• T0M_PATH: The installation path of Apache Tomcat 

► Reset tasks: reset. sh 

- Usage: This script performs clean up tasks to prepare the image for capture. The full 
script can be seen in “reset.sh” on page 392. 

reset. sh -T0M_PATH ${T0M_PATH} 

- Arguments: 

• T0M_PATH: The installation path of Apache Tomcat 

7.7 Creating the software bundles 

This section describes how to create software bundles to install Apache Tomcat. 

7.7.1 Creating a software bundle 

First, create the instance of the software bundle by completing the following steps: 

1 . From the Welcome window, click Images Build software bundles. Click the New 
Bundle icon (Figure 7-2). 



Figure 7-2 Click New Bundle icon 
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2. Enter the following values, as shown in Figure 7-3, and click Create: 

- Name: Tomcat 7.0.22 with IBM Java SDK 1 .6 SR9. 

- Universal ID: icon. bundle.apache.tomcat.7. 0.22. linux.x86-64. 

- Version: 1.0.0. 

- Description: This is a Tomcat 7.0.22 bundle. 

- Storage Location: local. 

- Community: Leave blank. 

- Uses IBM Installation Manager: Leave this option clear. 


3. 



Figure 7-3 Enter the values to create a software bundle instance 

The new bundle instance then appears in the list of bundles. Click the bundle to show the 
configuration and to access the tabs used to build the bundle (Figure 7-4). 



Figure 7-4 Software Bundle tabs 
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7.7.2 Specifying the products in the bundle 

To specify the products in the bundle, complete the following steps: 

1 . Go to the General tab and enter the details for the publisher and the products to 
be installed. 

2. In this scenario, Apache Tomcat 7.0.22 and IBM Java SDK 1 .6 SR9 are installed. Click the 
plus sign in the Products in the bundle area to enter the values shown in Table 7-1 . 

Table 7-1 The values you enter in to the Products in the Bundle field 


Product name 

Version 

Vendor 

IBM Java SDK 

1.6 SR9 

IBM 

Tomcat 

7.0.22 

Apache Foundation 


This information can confirm what software products the software bundle installed. 

3. Enter ITSO in the Publisher field (Figure 7-5). 


Tomcat 7.0.22 witii IBM Java SDK 1.6 SR9 j# Draft ^ M ^ ^ 

General Requirements Install Configuration Firewall Reset 


General Properties 

Name: 

Repository: 

Description: 


Universal ID: 

Version: 

Publisher: 

Created on: 

Updated date: 

Products in the bundle: 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 


local 



icon, bundle, apache.tomcat.7.0. 22. linux.x86-64 


1.0.0 


ITSO 


Mon Dec 12 2011 13:29:27 GMT-0500 (Eastern Standard 
Time) 


Mon Dec 12 2011 13:36:51 GMT-0500 (Eastern Standard 
Time) 


# 


Product Name 

Version 

Vendor 


IBM Java SDK 

1.6 SR9 

IBM 


Tomcat 

7.0.22 

Apache Foundation 

K 


Figure 7-5 General tab of the software bundle 
4. Click the Save icon. 
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7.7.3 Adding bundle requirements 


Enter the requirements of the software bundle: 

1 . Select the Requirements tab. 

2. In the Supported Operating Systems field, click Expand All. 

3. Select the requirements for operating systems. 

In this scenario, we assume that you have the binary files for IBM Java SDK 1 .6 SR9 for a 
Linux x86-64 system and Apache Tomcat for a Linux system. Therefore, the requirement 
of this software bundle is specified as the Linux operating system with x86-64 architecture. 
There are no requirements for distribution and version. 

Select the following values (Figure 7-6): 

- Type: Linux 

- Distribution: (none) 

- Architecture: x86-64 

- Version: (none) 

▼ Supported Operating Systems: 

Add Operating System j 
Expand All | Collapse All 

▼ E© [Linux] (x86-64) 

Type: 

Linux" 1 T | 

Distribution: 

I w I 

Architecture: 

XS6-64 Z. 

Version: 

| | 

Figure 7-6 Select Supported Operating Systems 

4. Click the Save icon. 

7.7.4 Specifying how to install the software content (installation tasks) 

On the Install tab, upload the scripts and the associated files to install the software, and 
specify how to run scripts by completing the following steps: 

1 . Select the Install tab. 

2. Upload the i nstal 1 . sh script and the binary files of IBM Java SDK and Apache Tomcat 
from the local machine. 

a. In the Files to Copy section, click the Add icon. 
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b. Select the files that you want to copy to the target. You can upload files from your local 
system or from a remote system. In this scenario, select the Local option, click 
Browse, and the select the i nstal 1 . sh file from the local machine (Figure 7-7). The 
i nstal 1 . sh file is run, so enable the Make executable option. 



Figure 7-7 Upload the install. sh script from the local machine 

c. Click Upload. 

d. Repeat the process to upload the binary files of IBM Java SDK and Apache Tomcat. 
Do not select the Make executable option for these files. 

3. In the Run Command field, select install .sh as the command to run. 

4. In the Run As field, enter root as the user ID. Specify the user ID under which the 
installation tasks run. 

5. Define the parameters that the installation scripts can access. The install .sh command 
requires the arguments shown in Table 7-2 to pass to the script. Click the Add icon in the 
Arguments area and enter the appropriate values from the table. 

Table 7-2 Arguments that the install.sh script requires 


Name 

Label 

Value 

Is password 

JDK_PATH 

JDK_PATH 

/usr/java 

Not selected 

JDK_FILE 

JDK_FILE 

i bm-java-x86_64-sdk-6. 
0-9. 2. bin 

Not selected 

TOM_PATH 

TOM_PATH 

/home/tomcat 

Not selected 

TOM_FILE 

TOM_FILE 

apache-tomcat-7.0.22.z 

ip 

Not selected 

RUNAS_USER 

RUNASJJSER 

TomcatUser 

Not selected 
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6. Click the Save icon. The completed Install tab looks like Figure 7-8. 


General Requirements Install Configuration Firewall Reset 


Install operation configuration 

Define how to insto.fi the bundle 


© Files to Copy 


Files that should he copied to the target machine: 

II Source (URI or file name) 

11 install. sh 

HI i b m-j ava-s dk-6.0-9.2-Mn ux-x8 6_64.bin 
A apache-tomcat-7. 0.22. zip 


Executable 

0 # 

;□ D ✓ * 

□ ! ei f I * 


® Command 


Run Command: 


install. sh 


Please select an executable script to run 


Hide Preview 


install. sh -JDK_ PA TH ${JDK_ PA TH } -JDK_FILE ${JDK_FILE} -TOM_PATH ${TOM_PATH} -TOM_FILE 
${TOM_FILE} -RUNAS_ USER ${RUNAS_USER } 


Run As: 

root 





i 

Arguments: 






# 

Name 

Label 

Value 

Is Password 




JDK_PATH 

JDK_PATH 

/usr/java 

□ 


£ 

* 8 

JDK_FILE 

JDK_FILE 

ibm-java-5dk-6.0-9.2- 

Iinux-x86_64.bin 

□ 

ft 

& 

* 0 

TQM_PATH 

TOM_PATH 

/ho me/to meat 

In 

It 

$ 

* V 


Figure 7-8 Install tab 


7.7.5 Specifying how to activate at deployment (activation tasks) 

On the Configure tab, define how to run the scripts at deployment time. This scenario uses 
the startup. sh script. 

To specify the activation tasks, complete the following steps: 

1 . Select the Configuration tab. 

2. Click the Add Operation icon in the Config Operations column (Figure 7-9). 


Deploy-time configuration 


Define how to configure the bundle in 3 new instance of a 

Config Operations cj 

■l, Click to add configi 
6 


Add Operation 


Figure 7-9 Add operation 


3. Enter activation. startupTomcat as the Operation name. 

4. In the File to Copy section, upload the startup. sh script as the file and select the Make 
executable option. 

5. In the Run Command field, select startup. sh as the command to run at deployment. 

6. In the Run As field, specify root as the user ID under which the Activation Tasks run. 
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7. The startup. sh script requires the arguments shown in Table 7-3. Click the Add icon in 
the Arguments area to enter each argument. 

Table 7-3 Arguments that the startup.sh script requires 


Name 

Label 

Value 

Is password 

JDK_PATH 

JDK_PATH 

/usr/java 

Not selected 

TOM_PATH 

TOM_PATH 

/home/tomcat 

Not selected 


8. Click the Save icon. Figure 7-10 shows the completed Configuration tab. 


General Requirements Install Configuration 


Firewall Reset 


Deploy-time configuration 

Define how to configure the bundle in a new instance of a virtual machine 


Config Operations 


* 


Details of "activation. startopTomcat" operation 


A 


activati o n . sta rtu pT o meat 


Ope rati □ n n a m e : activ ation.sta rtu pTomcat 

Service name: activati on. sta rtu pTomcat 

© Files to Copy 

Files that should be copied to the target machine: ^ 

II Sou rce { U Rl or file name} Exec uta b I e 

0 j startup.sh 0 |©|y|* 


0 Co m in a lid 


startup.sh [ ^ | 

Run Command: Please select an Hide Preview 

executable script to — 
run 


startup.sh -JDK_PATH ${JDK_PATH} -TQM_PATH ${TOM_PATH} 


Run As: 


Iroot 

i 

Arguments: 



# 

Name 

Label 

Value 

Is Password 

JDK_PATH 

JDK_PATH 

/usr/java 

□ * * 

T0M_PATH 

TOMPATH 

/home/tomcat 

□ it * 


- 


Figure 7-10 Configuration tab 


7.7.6 Specifying the clean tasks (Reset tasks) 

The Reset tab defines scripts that are run before capturing images. 

To specify the clean tasks, complete the following steps: 

1 . Select the Reset tab. 

2. In the File to Copy section, upload the reset. sh script. Select the Make executable 
option. 

3. In the Run Command field, select reset.sh. 
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4. Specify root as the user under which the reset tasks run. 

5. Enter the values shown in Table 7-4 in to the Arguments field. 


Table 7-4 The argument reset. sh requires 


Name 

Label 

Value 

Is password 

TOM_PATH 

TOM_PATH 

/home/tomcat 

Not selected 


6. Click the Save icon (Figure 7-1 1 ). 


General Requirements Install Configuration Firewall 

Reset operation configuration 

Define how to cleanup instance-specific data before capturing the image 


Reset 


0 Files to Copy 



Files that should be copied to the target machine: 

(I Source (URI or file name) 

Executable 

# 

lei — J 

(i) reset.sh 

10 

Ifij/ x 1 


0 Command 


Run Command: reset.sh * Hide Preview 

Please select an executable script to run 

reset, sh -TOM_PATH ${TOM_PATH } 


Run As: 

Arguments: 

Name 

TOM_PATH 


root 




+ 

Label 

Value 

Is Password 


TOMPATH 

/ho me/to meat 

□ 

K 


Figure 7-11 Reset tab 


7.7.7 Publishing the software bundle 

This task is optional. 

You can publish the software bundle, but after the bundle is published, you can no longer edit 
it. The bundle should be thoroughly tested before publication. 

To publish the software bundle, complete the following steps: 

1 . Click the Publish icon (Figure 7-1 2). 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 

Draft 

1 * \ 

I 

] udi 

General Requirements Install 

Configuration 

Firewall 

Reset 


Publish 

1 1 


Figure 7-12 The Publish icon 
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2. Verify that the status of the software bundle is Published (Figure 7-13). 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 Q Published 


Figure 7-13 Status of the bundle is turned into Published 


7.8 Importing the base image from IBM Workload Deployer 


The next step in the scenario is to import the base image from the IBM Workload Deployer 
into IBM Image Construction and Composition Tool. 

Complete the following steps: 

1 . Select the IBM Workload Deployer cloud provider (IWD-Scenario Instance) as the cloud 
provider. 

2. Click Images Build images in the task bar at the top of your window. 

3. Click the Import from Cloud Provider button to start the image import process from the 
IBM Workload Deployer cloud provider (Figure 7-14). 




Search import from Cloud Provider 


® All O An V 


Figure 7-14 Import from Cloud Provider button for image import 
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4. Select the IBM Workload Deployer Image for x86 image in the Available column and 
click the Add button to move it to the “Images to import” column. (You can select multiple 
images.) Click the Import button at the bottom of the window (Figure 7-15). 



Figure 7-15 Import an image from the IBM Workload Deployer 

5. After the image is imported, it is added to the list of images (Figure 7-16). Click the image 
name to show the configuration on the right. 



Figure 7-16 List of images from IBM Workload Deployer 
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7.9 Extending and customizing the image 


To extend and customize the image, create an image instance from the base image by 
completing the following steps: 

1 . With the image selected, as shown in Figure 7-1 6 on page 151, click the Extend icon 
(Figure 7-17). 


Figure 7-17 Click Extend icon 

2. Enter the following values to identify the new image instance (Figure 7-18) and 
click Create: 

- Name: Tomcat 7.0.22 with IBM Java SDK 1 .6 SR9. 

- Universal ID: icon.image.apache.tomcat.7.0.22.linux.redhat.x86-64. 

- Version: 1.0.0. 

- Description: This is a Tomcat 7.0.22 image. 


Extend an Image 

The new image will be created by extending this one. 


IBM Workload Deployer Imag 


Description: 



Universal ID: 


icon. image. ibm_workload_deployer_imac 


Name: 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 


Universal ID: 


icon. image. apache.tomcat./.0. 22. linux.redhat.x36-64 


Version: 


1.0.0 


Description: 


This is a Tomcat 7.0.22 image. 


Create Cancel 


Figure 7-18 Enter the information to identify the new image instance 
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3. The new image is added to the list of images. Next, customize the new image instance by 
adding the Apache Tomcat bundle to it. Select the new image instance and click the Start 
Editing icon (Figure 7-19). 


IBM Image Construction and Composition Tools 


Welcome 

Images Administer 

Images 

% ■#> [j- Tomcat 7.0.22 witli IBM J. .. 

\Type search text, , , 

Search Description: 

® All O An v 

Universal ID: 

IBM Workload Deployer Image for x86 . . jQ| 

Version: 

Tomcat 7.0.22 with IBM Java SDK 1.6 S. . 


Extends Image: 


Image Status: 


Cloud Provider: 


Logout I Help ” 


IWD-Scenario Instance ' 

•% It - 5 lx 


This is a Tomcat 7.0. | Start Editing \ 
icon, image, apache.tomcat.7.0. 22.1m ux.redhat.x86-64 
1.0.0 

IBM Workload Deployer Image for x86 Systems [1.0. 0.2] 


|^i 

Out of sync 


Figure 7-19 New image 

4. Expand the Software Bundles field and click Add bundle (Figure 7-20). 


Software Bundles: 


^ Add bundle 


Sort: Alphabetically, By install order 


► g| Red Hat Enterprise Linux (RHEL) [5.7] 


Figure 7-20 Click the Add bundle button in the Software Bundles field 
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5. Select the Tomcat 7.0.22 with IBM Java SDK 1 .6 SR9 bundle and click Add 
(Figure 7-21). 


Add bundle to image 

Select a bundle to install in the image 



Figure 7-21 Select software bundles you want to add 

6. Confirm that the Tomcat bundle is in the list of bundles to install on the image 
(Figure 7-22). 


'r Software Bundles: 


i'n.r 1 Add bundle 


Sort: Alphabetically . By install order 


► §1 Red Hat Enterprise Linux (RHEL) [5.7] 

► m Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 [1.0.0] 


Figure 7-22 Tomcat bundle is added to the list of software bundles 

7. Click the Save icon and then click the Done editing icon. 
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7.10 Synchronizing the customized image 


The next step is to synchronize the image to the cloud. To accomplish this task, complete the 
following steps: 

1 . Select the customized image and click the Synchronize icon in the Images window 
(Figure 7-23). 


Cloud Provider: 

IWD-Scenario Instance 

K 1.6 SRQ [Jj] Out of sync | | % 

1 IU II ISLdf ice 


1 ' 

Synchronize 


Figure 7-23 Click the Synchronize icon 


2. Select the cloud group in IBM Workload Deployer (in this case, Default ESX Group) to 
which to deploy the image, and enter a password to use for the root user (Figure 7-24). 
Click Done. 



Figure 7-24 Select the cloud provider and enter the password of the root user 
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3. The image status now shows as Synchronizing. To monitor the progress of the 

synchronization, click the Refresh icon (Figure 7-25), and check the Image Status field on 
the Images window periodically. 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 % Synchronizing | $ | [^Tl 

Description: 

This is a Tomcat image Refresh 

Universal ID: 

icon, image, apache.tomcat.7.0. 22. linux.redhat.xS6-64 

Version: 

1.0.0 

Extends Image: 

a2a9bfl3-3745-411f-a6al-13a4ee4db3cl 

Image Status: 

'4-1 Synchronizing 
Waiting for VM to start 


Figure 7-25 Check the progress of synchronization 


Tip If you log on to IBM Workload Deployer and click Instances -» Virtual Systems, 
you should see an instance named ICON cloned vmXX, where XX is a unique number. 
You can also follow the progress of the synchronization by checking the History field on 
the Virtual System Instances window periodically. 


4. When the synchronization is finished, the image status should be Synchronized 
(Figure 7-26). 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 H Synchronized 


Figure 7-26 Image status becomes Synchronized 


7.1 1 Verifying that the image is dispensed to the cloud 

Verify that the software installation completed successfully by completing the following steps: 

1 . To verify that the image was successfully extended, log on to the deployed image. 

To find the IP address of the image, open the Images page on Image Construction and 
Composition Tools, select the customized image, and extend the Virtual System field. 
(Figure 7-27). Log on to the virtual machine instance. 


■w Virtual System: 


Virtual System ID: 

10 

Virtual System Status: 

RM01006 

Hostname: 

9.42.171.32 

IP Address: 

9.42.171.32 

Download logs 

% 


Figure 7-27 Host name and IP address information about the Virtual System field 


156 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 



2. Verify that the software installations were successful. You can confirm the installation 
using various methods, depending on the software. In general, check the following items: 

- Verify that the installation directory for the product is populated. 

- Review installation logs that might be generated. 

- Verify the existence of any RunAs user IDs that you specified. 

- Check the operation of the product. 

In this scenario, first check the result of the IBM Java SDK installation (Figure 7-28). 

a. Run 1 s /usr/java to verify that the installation directory is populated. 

b. Run java -version and verify that the results are what you expect. 


-bash-3.2# Is /usr/java/ 

bin include notices.txt 

copyright jre readmefirst.lnx.txt 

demo lib sample 

docs license_en.txt src.zip 

-bash-3.2# java -version 

java version "1.6.0" 

Java(TM) SE Runtime Environment (build pxa6460sr9fp2-20 
110625_01(SR9 FP2) ) 

IBM J9 VM (build 2.4, JRE 1.6.0 IBM J9 2.4 Linux amd64- 
64 j vmxa6460sr9-201 10624_85526 (JIT enabled, AOT enable 
d) 

J9VM - 20110624_085526 
JIT - r9_20101028_17488ifxl7 
GC - 20101027_AA) 

JCL - 20110530_01 
-bash-3.2# 


Figure 7-28 Check the result of IBM Java SDK 


3. Check the result of the Apache Tomcat installation and the existence of TomcatUser 
(Figure 7-29): 

a. Run 1 s -al /home/tomcat to verify that the installation directory is populated. 


-bash-3. 2# 
total 124 

Is 

; -al /home/tomcat/ 






drwxr-xr-x 

9 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:43 


drwx 

3 

TomcatUser 

TomcatUser 

4096 

Nov 

9 

03:44 


drwxr-xr-x 

2 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:43 

bin 

drwxr-xr-x 

2 

TomcatUser 

TomcatUser 

4096 

Nov 

9 

03:44 

conf 

drwxr-xr-x 

2 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:43 

lib 

i 

-s 

3 

1 

-s 

1 

1 

-s 

1 

1 

1 

TomcatUser 

TomcatUser 

57851 

Sep 

27 

21:43 

LICENSE 

drwxr-xr-x 

2 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:41 

logs 

i 

-s 

3 

1 

-s 

1 

1 

-s 

1 

1 

1 

TomcatUser 

TomcatUser 

1230 

Sep 

27 

21:43 

NOTICE 

-rw-r--r— 

-NOTES 

1 

TomcatUser 

TomcatUser 

9060 

Sep 

27 

21:43 

RELEASE 

-rw-r — r — 
. txt 

1 

TomcatUser 

TomcatUser 

6860 

Sep 

27 

21:43 

RUNNING 

drwxr-xr-x 

2 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:43 

temp 

drwxr-xr-x 

7 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:43 

webapps 

drwxr-xr-x 
-bash-3. 2# 

2 

TomcatUser 

TomcatUser 

4096 

Sep 

27 

21:41 

work 


Figure 7-29 Check the installation directory of Apache Tomcat and the existence of 
TomcatUser 
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b. Start Tomcat, and run the following command to verify that Tomcat is running 
(Figure 7-30): 

ps -ef | grep java | grep -v grep 
netstat -an |grep 8080 
netstat -an jgrep 8443 


-bash-3.2# ps -ef |grep java |grep -v grep 
1001 2210 1 0 00:26 ? 00:00:06 /usr/bin/ 

java -Djava .util. logging .config.fi le=/home/tomcat/conf/lo 
gg ing . propert i es -Djava . ut i 1 . logging . manage r=org . apache . j 
ul i . ClassLoaderLogManager -Djava . endorsed . d i rs=/home/ tome 
at/endorsed -classpath /home/tomcat/b in/bootstrap . jar : /ho 
me/ t omca t/b in/ tomcat- jul i . jar -Dcatal ina . base=/home/tomca 
t -Dcatal ina . home=/home/tomcat -Djava . i o . tmpd i r=/home/tom 
cat/temp org . apache . catal ina . startup . Bootstrap start 
-bash-3.2# netstat -an |grep 8080 

top 0 0 0.0.0.0:8080 0.0. 0.0:* 

LISTEN 

-bash-3.2# netstat -an |grep 8443 

top 0 0 0.0.0.0:8443 0.0. 0.0:* 

LISTEN 

-bash-3 . 2# 


Figure 7-30 Check if Apache Tomcat runs successfully or not 

c. Access Tomcat from a web browser (use http :/ /<hostname>: 8080/) and confirm that 
you reach the Apache Tomcat index page. Then access Tomcat using SSL (use 
https :/ /<hostname>: 8443/). 

4. Check the activation scripts. 

If you added activation tasks for the software bundle, check the following items: 

- Thatyour activation scripts are in the /opt/IBM/AE/AS/<Z/niversaZ ID of the software 
bundle>_<Version of the software Zn/nflfZe>/activati on directory 

- That your activation service is registered 

In this scenario, you upload startup. sh as a script for activation. The universal ID of the 
Tomcat bundle is icon. image. apache. tomcat. 7.0. 22. 1 i nux.redhat.x86-64, and the 
version is 1.0.0 (from Figure 7-3 on page 143). So, confirm that the startup, sh script is in 
the following directory (Figure 7-31): 

/opt/ I BM/AE/AS/ icon. image. apache. tomcat. 7. 0.22.1 inux.redhat. x86-64_l. 0.0/act i va 
tion 


-bash-3.2# cd /opt/IBM/ AE/AS/ i con . bundle . apache . tomcat . 7 . 0 . 22 . 1 
inux . x86-64_l . 0 . 0/act i vat i on/ 

-bash-3.2# Is 
startup . sh 
-bash-3 . 2# 


Figure 7-31 Check the existence of scripts for activation 
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5. Confirm that acti vati on . startupTomcat was registered as a service. Note that 

acti vati on . startupTomcat is the operation name that you set on the Configure tab for the 
Tomcat bundle. To confirm that acti vati on. startupTomcat is registered, run 
chkconfig --1 ist. If you cannot find the service, the startup. sh script is not run at 
deployment. See Figure 7-32. 


-bash-3.2# chkconfig — list |grep act i vat i on . startupTomcat 
act i vat i on . startupTomcat Choff l:off 2:off 3:on 

4:off 5:on 6:off 
-bash-3 . 2# 

Figure 7-32 Check that the service is already registered 

6. Check the reset script. Verify that the reset, sh script is in the following directory: 

/op\/\BWAE/AS/<Universal ID of the software bundle>_<Version of the software 

bundle>/rese\/<Universal ID of the software bundle>_<version>_ resetOperation_1 

See Figure 7-33. 


-bash-3.2# cd 

/opt/IBM/ AE/ AS/icon. bund le.a pache. tomcat. 7.0.22. Iinux>486-64_1 .0.0/ reset/ icon, bund le.a pa 
che.tomcat.7.0.22.linux>£6-64_1 ,0.0_resetO peration_1 / 

-bash-3.2# Is 
reset, sh 
-bash-3.2# 


Figure 7-33 Verify the reset.sh script 


7.12 Capturing the customized image 

If you are satisfied with the new customized image, save the image into the virtual image 
catalog of IBM Workload Deployer by completing the following steps: 

1 . From the Images page in the IBM Image Construction and Composition Tool, select the 
customized image, and click the Capture icon (Figure 7-34). 



Figure 7-34 Click the Capture icon 

The image status now shows as Capturing (Figure 7-35). 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 H Capturing 
Figure 7-35 Image Status becomes Capturing 

2. To follow the progress of the capture, click the Refresh icon, and check the Image Status 
field on the Images Page periodically. 
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When the capture completes, the image status shows as Completed (Figure 7-36). 


Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 ^ Completed 
Figure 7-36 Image Status is Completed 

3. Log on to IBM Workload Deployer. You can confirm the customized image is registered 
the Virtual Image Catalog and ready to use (Figure 7-37). 


IBM Workload Deployer 

Welcome Instances Patterns 

Catalog 

Reports Clo 

Virtual Images 


+ 

Tomcat 7.0.22 with IBM J 

Search... 


u- 

Description: 

Tomcat 7.0.22 with IBM Java SDK 1.6 SR^ 

h_ 


Created on: 

WebSphere Application Server 7.0.0.19 

View Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 

WebSphere Application Server 7.0.0.19 


1?E3 

Updated on: 


Figure 7-37 Tomcat image is registered in Virtual Images Catalog 


7.13 Deploying the customized image with IBM Workload 
Deployer 


The next step is to use the customized image to build a virtual system in IBM Workload 
Deployer and to verify that the activation tasks complete successfully. 

Complete the following steps: 

1 . Log on to IBM Workload Deployer. 

2. From the Welcome page, click Patterns -» Virtual Systems (Figure 7-38). 


IBM Workload Deployer 
Welcome Instances 




Virtual Applications 


id Deployer 


Database Pattern ^ Displays a list of virtual systems patterns. | 


Figure 7-38 Open the Virtual Systems Patterns window 
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3. Click the New icon (Figure 7-39). 


IBM Workload Deplayer 


Welcome Instances 

Patterns 

Catalog 

Virtual System Patterns 


is 

Search... tl|Nev> 


Figure 7-39 Click the New icon 

4. Enter the following values for the new pattern (Figure 7-40) and click OK: 

- Name: Tomcat 7.0.22 Standalone 

- Description: 1 Tomcat Server Topology 


Describe the pattern you want to add. 

* Name: Tomcat 7.0.22 Standalone 

Description: 1 Tomcat Server Topology 


OK Cancel 

Figure 7-40 Enter the Pattern Name 

The new pattern appears in the list of virtual system patterns (Figure 7-41). 


IBM Workload Deployer 

Welcome Instances Patterns 

Catalog 

Reports Cloud 

Virtual System Patterns 

# 

Tomcat 7.0.22 Standalone 

Search... 

U- 

Description: 

Tomcat 7.0.22 Standalone 


Created on: 

WebSphere Message Broker 7.0.0. 1 (Advanced) 

*4 

Current status: 


Figure 7-4 1 The New pattern opens 


5. Click the Edit icon to go to the edit window (Figure 7-42). 


Tomcat 7.0.22 Standalone % $ 

h 01 ® 


"2 

RfesajBorig 1 Tomcat Ser 

[Edit]opoiogy 


Figure 7-42 Click the Edit icon and go to the Edit window 
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6. Drag the customized image to the Edit window. In this scenario, drag the Tomcat 7.0.22 
with IBM Java SDK 1 .6 SR9 image (Figure 7-43). 


IBM Workload Deployer 


X Administrator | © Help | About | Lc 

Welcome Instances Patterns 

Catalog Reports Cloud System 

Pattern Editor 


Editing Tomcat 7.0.22 
Standalone ^ 

Search... 


Last updated on Nov 9, 2011 8:28:13 PM | 
Options 

Parts (26/26) 



HE 


EL Standalone server 

WebSphere Application Server 3,0.0. 1 

3.0.0. l r ESX. r RedHat Enterprise Linux 5 (RedHat Enterpi 

w Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 

rise 

Linux 5) 



EL Standalone server 



WebSphere Application Server S .0.0.1 

8,00.1. ESX r RedHat Enterprise Linux 64-Bit 5 (RedHat 

Enterprise Linux 5) 


Drag and drop items ontc 

© Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 



Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 

1.0. 0 r ESX r RedHat Enterprise Linux 64-Bit 5.7 (RHEL 5. 

7 [I 


X64) 

V 



Figure 7-43 Drag the customized image 


7. Click the Done editing button (Figure 7-44). 


Editing Tomcat 7.0.22 Standalone % <&> $ Done editing 

fr 

Figure 7-44 Click the Done editing button 

8. Click the Deploy icon (Figure 7-45). 


Tomcat 7.0.22 Standalone % ^ 

t ' & a 

Description: 1 Tom 

Deploy in the cloud... fX 


Figure 7-45 Click the Deploy icon 


9. Enter the following values to be assigned to the new virtual system and click OK: 

- Virtual system name: Tomcat 7.0.22 Standalone 

- Password (root): password 

- Password (virtuser): password 
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See Figure 7-46. 


Describe the virtual system you want to deploy. 


& 

Virtual system name: 



Tomcat 7.0.22 Standalone 


& 

Choose Environment 


& 

Schedule deployment 


& 

Configure virtual parts 



gT Tomcat 7.0.22 with IBM Java SDK 1.6 SR9 


L ok _I 

Cancel 


Figure 7-46 Enter the Virtual system name 

The new virtual system using your customized image is provisioned to the cloud. 

10. Verify the virtual instance. 

When the provisioning is complete, log on to the virtual machine and verify that the 
activation tasks were completed successfully. 

The following activation task logs are in the /opt/IBM/AE/AR directory: 

- Standard out log: Service Name. out 

- Error log: Service Name. err 

In this scenario, the activation. startupTomcat service is registered and starts the Tomcat 
instance. You can confirm the task was run by looking at the 
activation. startupTomcat. out and activation. startupTomcat. err logs. 


-bash-3.2# cd /opt/IBM/AE/AR 
-bash-3.2# Is 

activation. startupTomcat .err 

Conf igPWD ROOT. out 

activation. startupTomcat . out 

Conf igPWD USER. err 

Conf igLocale . err 

Conf igPWD_USER . out 

Conf igLocale . out 

Conf igSSH. err 

Conf igNET . err 

Conf igSSH. out 

Conf igNET . out 

L i cense . err 

Conf igNTP . err 

L i cense . out 

Conf igNTP . out 

ovf-env . ar 

Conf igP«D_R00T. err 

-bash-3.2# cat activation. startupTomcat. err 

-bash-3. 2# 



Figure 7-47 activation. startupTomcat has no error 


To verify that Tomcat started correctly, access it using a web browser, first with HTTP 
(http://<Hostname>:8080/) and then with SSL (https://<Hostname>:8443/). 

If you can access Tomcat, you have successfully created a virtual system using your new 
customized image. 
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Part 3 


Virtual applications 


This part introduces the concepts associated with virtual application patterns in IBM Workload 
Deployer. It then describes how to create, deploy, and manage virtual application instances. It 
provides three simple yet typical scenarios for the usage of application patterns with 
IBM Workload Deployer. 

This part contains the following chapters: 

► Chapter 8, “Introduction to virtual applications” on page 167 

► Chapter 9, “Virtual application pattern example: Web services” on page 231 

► Chapter 10, “Virtual application pattern example: OSGi” on page 247 

► Chapter 1 1 , “Database patterns and Data Studio web console example” on page 261 

► Chapter 12, “Custom plug-ins for virtual application patterns” on page 287 

► Chapter 13, “Managing virtual applications” on page 303 

► Chapter 14, “Managing virtual applications from the command-line interface” on page 325 


© Copyright IBM Corp. 2012. All rights reserved 
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Introduction to virtual 
applications 


IBM Workload Deployer is the successor to IBM WebSphere CloudBurst Appliance. The 
previous product focused on the creation, deployment, and maintenance of virtual systems 
that eased the effort involved in successfully reproducing systems in which to deploy 
enterprise applications. 

This chapter describes the features that make the addition of the virtual application 
capabilities an important addition to the cloud-computing environment on IBM Workload 
Deployer. 

This chapter contains the following topics: 

► Concepts 

► Building virtual application patterns 

► Shared services 

► Virtual application deployment 


© Copyright IBM Corp. 2012. All rights reserved. 
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8.1 Concepts 


The virtual application capabilities in the IBM Workload Deployer are based on the concept of 
standardized application-centric pattern solutions. The use of standard patterns allows 
developers of applications in cloud environments to focus on the application and its 
requirements instead of the middleware infrastructure and the often complex configuration of 
the middleware products needed to deploy them. 

Virtual application patterns define the resources required to support virtual applications, 
including web applications, databases, user registries, and more. These patterns are the 
deployment unit for a virtual application. 

The underlying structure for virtual application patterns is pattern types. Pattern types are the 
containers of solution-specific and topology-specific resources that are required for different 
types of virtual applications. The pattern types also provide shared services that incorporate 
runtime services, such as caching service and elastic load balancing. 

Pattern types contain plug-ins that provide the parts of the application and the lifecycle 
management of the parts (installation, configuration, start, stop, failure and recovery, and so 
on). The plug-ins contribute the components, links, and policies used to assemble virtual 
applications. Before building a virtual application using a virtual application pattern, you must 
enable the pattern types that are needed to provide the components of the pattern. 

The pattern types fall into the following primary categories: 

► Web Application Pattern types 

► Database pattern types 

► Foundation Pattern type 


8.2 Building virtual application patterns 

When you initially set up IBM Workload Deployer, you need to complete a series of steps that 
make the virtual application features usable and functional in the appliance. This chapter 
assumes that the cloud (the IP groups, hypervisors, and cloud groups) was configured as part 
of the initial appliance setup and focuses on topics that are specific to virtual applications. 

This section includes the following topics: 

► IBM Workload Deployer virtual images 

► Setting the default deployment settings 

► IBM Workload Deployer pattern types 

► Virtual Application Builder overview 

► Policies 

► Reference layering 

► Application sharing 

User permissions: Because this chapter takes you through the configuration of the virtual 
application settings, it assumes that your user ID has full administrative permissions to the 
IBM Workload Deployer appliance. To view these settings, you must have at least cloud 
administration and appliance administration read-only permissions to the cloud and 
appliance resources. To change the settings requires full administrative permissions. 
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8.2.1 IBM Workload Deployer virtual images 


The IBM Workload Deployer appliance ships with the following images that are the foundation 
for the database and web application patterns: 

► IBM OS image for AIX Systems (for customers using PowerVM hypervisors) 

► IBM Workload Deployer Image for x86 Systems (for customers using VMware ESX 
hypervisors) 

These images provide the functional environment that enables the virtual application patterns 
to deploy, run, and be managed by the appliance. This environment contains an activation 
code that sets up communication with the appliance during the different stages of the 
deployment boot process and management of the virtual applications. These images also 
contain a code that is required by the appliance to support all patterns for shared services, 
such as load balancing and caching. 

These images are available in the appliance by clicking Catalog -» Virtual Images 
(Figure 8-1). 


IBM Workload Deployer 

Welcome Instances Patterns 

Catalog Reports Cloud 

System 


Virtual Images 


+ 

IBM OS Image for ADC Systems 



Search... 


u- 

Description: 

IBM OS Image for AIX Systems 


DB2 Enterprise 9. 7. 4.0 

l®H 

w 

Created on: 

Nov 3, 2011 1:50:09 AM 


DB2 Enterprise 9. 7. 4.0 (PowerVM) 

l®H 


Current status: 

S License not accepted 


DB2 Express 9. 7. 4.0 

Si 


Updated on: 

Nov 3, 2011 4:48:07 AM 


IBM OS Image for AIX Systems 

l^s 


License agreement: 

(?□ Not accepted [accept...] 


IBM OS Image for AIX Systems - Large 

I^S 


Hypervisor type: 

PowerVM 


IBM OS Image for AIX Systems - Medium 

l®0 


Operating system: 

AIX, version 6100-05 [IBM AIX 6100-05) 

IBM OS Image for AIX Systems - Small 

1^0 


Version: 

1.0 


IBM OS Image for AIX Systems - Tiny 

l®0 


Image reference number: 

60 


IBM OS Image for AIX Systems - Xlarge 

1^0 





IBM Workload Deployer Image forx86 Systems 

l®0 


Product IDs [e.g., 5724X89): 

5725-F60 (PVU license) 


WebSphere Application Server 7.0.0.19 

1^0 


Contains parts: 

Core OS 

[part product IDs...] 

WebSphere Application Server 7.0.0.19 

l®0 


Included in patterns: 

[none) 


WebSphere Application Server 7.0.0.19 

1^0 





WebSphere Application Server 7.0.0.19 

IS 

V 

In the cloud now: 

[none) 





Access granted to: 

Administrator [owner] 



Figure 8-1 Virtual images in the appliance 


IBM OS image for AIX Systems ships in various sizes to cover various hardware 
requirements for virtual application deployments. The image supplied does not support 
external storage. You can view the different disk sizes that are included in the image by 
clicking the image name and then expanding the hardware section of the image details pane 
on the right. 
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The disk sizes vary between 30.88 GB and 1535 GB. When enabling the AIX images, it is 
important to verify the disk storage size requirements of your application. If multiple IBM OS 
image for AIX Systems image size licenses are accepted, the virtual application code 
calculates the system requirements from the pattern and uses the smallest image that meets 
the pattern’s requirements (Figure 8-2). 


IBM OS Image for AIX Systems 


Contains parts: Core os [P art Product IDs...] 

Included in patterns: (none) 


In the cloud now: (none) 

Access granted to: Administrator [owner] 

Everyone [read] [remove] 
Add more... 


0 Hardware 

General information 

Virtual CPU count: 1 


Virtual memory (MB): 

3072 


N et w o rk i nte rf a ce s : 

1 


Gb Disk 



Label 

File name 

Capacity (GB) 

diskl 

image l.mksysb 

30.88 


0 Comments There are no comments yet 


Figure 8-2 IBM OS image for AIX Systems hardware disk size 


If you extend and capture a new image to incorporate a disk size that is not included in the 


appliance (for example, 2 TB), you need to add the image to the catalog. Click the New ( # ) 
icon, and provide the URL to the Open Virtualization Format Archive (OVA) file that contains 
the new image. 


You need to enable the license for an image for your specific hypervisor type or types to 
deploy a virtual application. To enable the IBM Workload Deployer Image for x86 Systems, 
complete the following steps: 

1 . Click Catalog Virtual Images. Click IBM Workload Deployer Image for x86 
Systems. The right pane displays the details for the image. 
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2. On the license agreement line, click Accept. A license agreement window opens 
(Figure 8-3). Select each of the following license links in the window: 

- VMware Tools 

- Red Hat Enterprise Linux 

- IBM Workload Deployer Image for x86 Systems 

Click OK. 



Figure 8-3 Accepting the IBM Workload Deployer Image for x86 Systems license 

After you accept the licenses, the image license status icon changes from the “License not 
accepted” state to the “Read-only” accepted state (Figure 8-4). 


IBM OS Image for AIX Systems - Xlarge 


IBM Workload Deployer Image forx86 Systems 
WebSphere Application Server 7.0.0.19 

Figure 8-4 Accepted license 



l?E3 


8.2.2 Setting the default deployment settings 

After you accept the IBM Workload Virtual image license, you then need to verify the default 
deployment settings: 

1 . Click Cloud -» Default Deploy Settings. On this window, you can set up the ESX 
Hypervisor default image and the PowerVM images that can be used for 
workload deployments. 
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2. By default, IBM Workload Deployer Image for x86 Systems, for which you accepted the 
license, is listed under the Hypervisor Type:ESX section of the window. If it is not, click 
Change to add it. Verify that you have the correct images selected as your default 
deployment setting. 

3. If you are loading a new IBM Workload Deployer Image or an error occurs during the load, 
verify that the correct image is listed and accepted (Figure 8-5). 


Settings for Default Deploy 

Define the default virtual image for deploying Shared Services and Virtual Applications 
NOTE: Only supports 64-bit Hypervisors and images. 

Hypervisor Type: ESX 

Set the default image below: 

Name License Agreement Version Description Reference ID 

IBM Workload Deployer Image for .g-. AcceDted 1 0 0 2 IBM Wor kload Deployer Image for 117 

x86 Systems ^ w -u.u.^ X 86 Systems 

Change 

Hypervisor Type: PowerVM 

Set the image candidates in the list below: 


Name 

License Agreement 

Version 

Memory 

Disk Size 

Description 

Reference ID 

Action 

IBM OS Image for AIX 
Systems 

[?□ Not Accepted 

1.0 

3072MB 

31GB 

IBM OS Image for AIX Systems 

60 

Delete 

IBM OS Image for AIX 
Systems - Tiny 

Not Accepted 

1.1 

3072MB 

44GB 


cef20 1145.0 

Delete 

IBM OS Image for AIX 
Systems - Small 

Accepted 

1.1 

3072MB 

89GB 


ccd201145.0 

Delete 

IBM OS Image for AIX 
Systems - Medium 

[?□ Not Accepted 

1.1 

3072MB 

119GB 


bef201145.0 

Delete 

IBM OS Image for AIX 
Systems - Large 

[?□ Not Accepted 

1.1 

3072MB 

449GB 


aed201145.0 

Delete 

IBM OS Image for AIX 
Systems - Xlarge 

[?□ Not Accepted 

1.1 

3072MB 

1535GB 


afd201145.0 

Delete 


Figure 8-5 Default deploymrnt settings 

4. In the Setting for Default Deploy window shown in Figure 8-5, IBM Workload Deployer 
Image for x86 is used for ESX deployments and IBM OS Image for AIX Systems-Small is 
used for virtual application deployments. You can have multiple image licenses accepted 
for PowerVM. If at any point you add images to the image catalog page (by clicking 
Catalog -» Virtual Images) and want to add the image here, click the Add or Change 
buttons. 


8.2.3 IBM Workload Deployer pattern types 

To create and deploy virtual application patterns, you must enable the appropriate IBM 
Workload Deployer pattern types. Enabling the pattern types includes both the task of 
accepting the license and of enabling the pattern type. 

The pattern types can be located by clicking Cloud -> Pattern Types. To view the plug-ins 
that are included in a pattern type, select the pattern type, and then click the Show me all 
Plug-ins in this pattern type link in the details window. 
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Web Application Pattern 

The Web Application Pattern is an IBM Workload Deployer extension that you can use to 
build online web-application style virtual applications. It provides a set of components that are 
typical for web applications, such as Java Enterprise Edition (Java EE), DB2 provisioning, 
database JDBC connectivity, Lightweight Directory Access Protocol (LDAP) user registries, 
and Java messaging. 

The Web Application Pattern includes plug-ins for WebSphere Application Server to run web 
archives (WAR files), enterprise archives (EAR files), and enterprise bundle archive 
applications and plug-ins (OSGi EBA). These files configure connections from applications 
that are hosted in WebSphere Application Server to existing resources, such as databases, 
web services, WebSphere MQ, IBM CICS®, IBM IMS™, or LDAP servers. The pattern also 
includes policies for configuring dynamically scaled server provisioning, load balancing, and 
caching. The dynamic scaling policy can be based on processor consumption metrics or 
response time, and the caching is a distributed in-memory cache. 

WebApp Pattern Type 1 .0 uses a WebSphere Application Server V7.0.0.19 image for 
deployments. Web Application Pattern Type 2.0 type uses a WebSphere Application Server 
V8.0.0.1 image for deployments. IBM Workload Deployer V3.1 .0.0 includes combinations of 
license agreements for each of these Web Application Pattern types, listed under the pattern 
types as VI .0.0.3 and V2. 0.0.0 in Figure 8-6. 


Pattern Types 

% # 

web| 


Web Application Pattern Type 2.0 

l?E3 

Web Application Pattern Type 
2. 0.0.0 

I?E3 

WebApp Pattern Type 1,0 


WebApp Pattern Type 1.0. 0.3 

!?E3 


Figure 8-6 Web Application Patterns 


Web Application Patterns include the following support: 

► Artifacts: 

- Java Platform, Enterprise Edition EAR files 

- Java Platform, Enterprise Edition WAR files 

- Archives (compressed files) 

- Enterprise bundle archive (EBA) files 

- Web service policy sets 

- LDAP Data Interchange Format (LDIF) files 

For Java Platform, Enterprise Edition EAR and WAR files, there is a default configuration 
for resource-env-references, ejb-references, init-parameters for servlets, JSP 
configuration, and url-references that is not currently exposed for configuration by the 
user. 

► Programming Models: 

- Java Platform, Enterprise Edition 5 

- J2EE vl .4 

- J2EE vl .3 

- J2EE vl .2 

- OSGi 
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- JPA 

- JAX-RPC 

- JAX-WS 

- JAX-RS 

► Protocols: Inbound HTTP and HTTPS 

► EJBs: 

- Local EJB reference 

- Resource Adapter Archive (RAR) files embedded in the same EAR 

- Message-driven beans embedded in the same EAR file (and accessed locally) 

► Connectivity: 

- Generic outbound targets 

- DB2 (Linux, UNIX, and Windows and IBM z/OS®) 

- Oracle 

- IBM Informix® 

- Existing WebSphere MQ queues and topics 

- Existing CICS and IMS systems 

- Existing Tivoli Directory Server 

- Existing Microsoft Active Directory Server 

- Web services endpoints 

► Load balancing: HTTP and HTTPS traffic 

► Session persistence: Session replication with WebSphere extreme Scale 

► Monitoring: 

- Integrated monitoring using IBM Tivoli Monitoring operating system agent 

- Virtual machine monitoring metrics role up to an IBM Tivoli Enterprise Monitoring 
Server server (operating system and application 

► Logging: Integrated logging and synchronization to an external server 

Most of the supported web application function is represented by components that are 
displayed in Virtual Application Builder when you build an application. 

Before you configure the Web Application Pattern, verify that your system meets the IBM 
Workload Deployer prerequisites listed at the following address: 

http : //publ ib.boul der.1 bm.com/i nfocenter/worl odep/v3rlm0/topi c/com.i bm.webapp.doc/ 
ap/ apc_prodreqs . html 

Aside from the hardware and software requirements, IBM Workload Deployer also has port 
requirements that must be met for virtual application deployment to function correctly. Go to 
the following address for those requirements: 

http: //publ ib.boul der.i bm.com/i nfocenter/worl odep/v3rlm0/topi c/com.i bm.webapp.doc/ 
ap/ri wd_ports.html 

For more information about the included product versions in the pattern type, go to the 
following address: 

http: //publ ib.boul der.i bm.com/i nfocenter/worl odep/v3rlm0/topi c/com.i bm.webapp.doc/ 
ap/apgst_l icense.html 

Enabling the Web Application Pattern 

You must enable the Web Application Pattern to use the Virtual Application Builder and to 
create and deploy virtual web applications in IBM Workload Deployer. 
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To enable a Web Application Pattern, complete the following steps: 

1 . Click Cloud -» Pattern types and select Web Application Pattern V2.0.0.0 in the list. 

2. Click the Enable All link in the details pane on the right (Figure 8-7). 


Pattern Types 

% # 

Web Application Pattern Type 




Pattern Type 


Name: 

Web Application Pattern Type 


Foundation Pattern Type 2.0 

▲ 

Description: 

IBM Web Application Pattern Type 


Foundation Pattern Type 2. 0.0.0 

A 

License Agreement: 

Jg Not Accepted 

[ Accept... ] 


IBM Data Mart Pattern 1.1 


Status: 

!?□ Not Accepted 

[ Enable All... ] 


IBM Data Mart Pattern 1. 1.0.0 

l?o 

Required: 

Foundation Pattern Type (2. 0.0.0 or above) 

IBM Database Patterns 1.1 

A 

Plug-ins: 

Show me all Plug-ins in this pattern type 

IBM Database Patterns 1. 1.0.0 

A 

0 Dependency 




IBM Transactional Database Pattern 1.1 

i*a 

This pattern type has one or more pre-requirements that need to be enabled 



A listed pattern type(s) need to be enabled in sequence. Please press "Enable / 

IBM Transactional Database Pattern 1. 1.0.0 


take awhile. 




Web Application Pattern Type 2.0 

l?o 

Pattern Type name 

Status 



Web Application Pattern Type 2. 0.0.0 

ilia 

1 Foundation Pattern Type 2.0.0.0 A Unavailable 


WebApp Pattern Type 1.0 

i?a 





WebApp Pattern Type 1.0. 0.3 

l?Q 






Figure 8-7 Pattern Types window 


The license acceptance window opens (Figure 8-8). Select Web Application Pattern 
Type 2.O.O.O. 


Web Application Pattern Type 

Name: 

Web Application Pattern Type 


Description: 

IBM Web Application Pattern Type 


License Agreement: 

|?g Not Accepted [ Accept... ] 


Status: 

|?H Not Accepted [ Enable All... ] 


B 

All licenses must be accepted before you can begin using this pattern type 


P 

0 Web Application Pattern Type 2. 0.0.0 




Cancel 

led first 
3le All" 1 1 


take awhile. 




Figure 8-8 Required Web Application Pattern Type license 
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3. In the license acceptance window, read the license and then accept it by clicking Accept. 

4. After you accept the license agreement, the Enable All process is complete. Click Done 
(Figure 8-9). 



Figure 8-9 Completing the Web Application Pattern Type license 


After completing this process, the pattern types list is updated to display the pattern types that 
you enabled. Because the Foundation Pattern is required for the Web Application Pattern, 
both the Foundation Pattern and Web Application Pattern are enabled. 
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After you accept the pattern type, the pattern’s detail window includes a list of the plug-ins 
that are included that are currently disabled. For convenience, the plug-ins that are listed are 
links. If you click a disabled plug-in link, the configuration window for that plug-in opens 
(Figure 8-10). You can also access this page by clicking Cloud System Plug-ins. 


Web Application Pattern Type 

Name: Web Application Pattern Type 


Description: 

IBM Web Application Pattern Type 

License Agreement: 

Accepted [View.. ] 

Status: 

Q Available [ Disable., ] 


Required: Foundation Pattern Type (2. 0.0.0 or above) 

Show me all Plug-ins in this pattern type 


Plug-ins: 


Disabled plug-ins required for configuration: 
IB wasoracle/2. 0.0.0 
IB wasctg/2. 0.0.0 


Dependency 


Pattern Type name Status 

1 Foundation Pattern Type 2. 0.0.0 @f Available 


Figure 8-10 Viewing the disabled plug-ins in the Web Application Pattern Type 


If you need to use the plug-ins that are disabled, a user with administrative privilege must 
configure and then enable them. In this example, the following plug-ins might 
require configuration: 

► The CICS Transaction Gateway plug-in (wasctg), which is used to configure the Java 
Connector Architecture or JCA connector between WebSphere and 

CICS Transaction Gateway 

► The Oracle plug-in (wasoracl e), which is used to configure a JDBC connection between 
WebSphere and an existing external Oracle database 

IBM Database Patterns VI .1 

IBM Database Pattern allows you to create and deploy databases in a 
Database-as-a-Service (DBaaS) cloud environment. If you are hosting a DB2 database using 
IBM Workload Deployer or want to run the sample Java EE web application or secured Java 
EE web application, you must enable IBM Database Patterns. 

IBM Database Patterns manage the DB2 deployment in IBM Workload Deployer. The DB2 
plug-ins support the deployment, management, and automation of the DB2 patterns. The 
topology configuration for the DB2 instance or instances in IBM Workload Deployer is 
determined by the options that you configure when creating the DB2 pattern. 
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Figure 8-11 illustrates the IBM Database Patterns workflow. 



Figure 8-11 IBM Database Patterns workflow 


IBM Database Patterns have the following main functional patterns: 

► IBM Data Mart Pattern VI .1 

► IBM Transactional Database Pattern VI .1 

Both functional patterns have IBM Database Pattern VI .1 as a prerequisite pattern type. IBM 
Database Pattern VI .1 contains the DB2 plug-in, the IBM Tivoli Storage Manager plug-in, and 
the IBM Data Studio Web Console plug-in. You must configure the Tivoli Storage Manager 
plug-in for the database patterns instances to perform automated backup and recovery. 

IBM Data Mart Pattern provides capabilities that are essential to the provisioning and 
management of data used in applications that are tuned for I/O throughput. These 
applications are common to workloads in the layer, which is used to get data from the data 
warehouse to the users and analysts who need it. These capabilities commonly include data 
customization, data compression, and SQL Warehousing. You must configure the data mart 
plug-in to use this pattern. 

IBM Transactional Database Pattern is designed to support departmental OLTP applications 
that do not require high levels of data customization. This pattern offers a cost effective 
approach to delivering transactional database infrastructure for information-centric 
applications. You must configure the OLTP plug-in to use this pattern. 
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Database patterns include the following support: 

► Programming models: 

- Remote application 

- SQL stored procedure 

► SQL compatibility: 

- DB2 for Linux, UNIX, and Windows 

- Native Oracle compatibility 

► Protocols: All standard DB2 protocols for JDBC type 4 (See 

http ://publib.boulder.ibm.com/infocenter/db21uw/v9r7/index.jsp?topic=%2Fcom.i bin 
.swg.im.dbclient. install .doc%2Fdoc%2Fc0022612. html for more information.) 

► Workloads: 

- Development and test 

- Online transaction procession (OLTP) 

- Data mart 

► Monitoring: IBM Optim™ Performance Manager 

► Backup: Tivoli Storage Manager 

Enabling the database pattern types 

You can enable IBM Database Patterns VI .1 by itself or as a prerequisite pattern type when 
you click any of the other database pattern type’s Enable All link. 

To enable IBM Transactional Database Pattern VI. 1, complete the following steps: 

1. Click Cloud -» Pattern Types and select IBM Transactional Database Pattern 1.1. 0.0. 

2. On the detail pane displayed on the right, select the Enable All link (Figure 8-12). 


Pattern Types 

% # 

IBM Transactional Database Pattern 



Pattern Type 


Name: 

IBM Transactional Database Pattern 


Foundation Pattern Type 2.0 

Sr 

Description: 

IBM Transactional Database Pattern 


Foundation Pattern Type 2. 0.0.0 

fflr 

License Agreement: 

Not Accepted 

[ Accept... ] 


IBM Data Mart Pattern 1.1 


Status: 

|?H Not Accepted 

[ Enable All... ] 


IBM Data Mart Pattern 1. 1.0.0 

(?□ 

Required: 

IBM Database Patterns [1. 1.0.0 or above) 

IBM Database Patterns 1.1 

& 

Plug-ins: 

Show me all Plug-ins in this pattern type 

IBM Database Patterns 1.1. 0.0 

& 

0 Dependency 




IBM Transactional Database Pattern 1.1 

!?□ 

This pattern type has one or more pre-requirements that need to be enat 



listed pattern type(s) need to be enabled in sequence. Please press "Ena 

IBM Transactional Database Pattern 1.1. 0.0 

i®E3 

take awhile. 




Web Application Pattern Type 2.0 

9 

Pattern Type name 

Status 



Web Application Pattern Type 2. 0.0.0 

& 

1 Foundation Pattern Type 2. 0.0.0 Available 


WebApp Pattern Type 1.0 

I^S 

2 IBM Database Patterns 1.1. 0.0 & Unavailable 


WebApp Pattern Type 1.0. 0.3 

a 






Figure 8-12 IBM Transactional Database Pattern VI. 1.0.0 

3. A window for license acceptance opens. Click the IBM Transactional Database Pattern 
1 . 1 . 0.0 link to display and accept the license. 
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4. After you accept the license agreement, a confirmation window opens. Click Done. The 
page refreshes, and both the IBM Transactional Database Pattern VI. 1 and the IBM 
Database Patterns VI .1 pattern types are now in the accepted state. 

The oltp/1.1.0.0 plug-in is listed in the Disabled plug-ins that are required for 
configuration list (Figure 8-13). 


IBM Transactional Database Pattern 

Name: IBM Transactional Database Pattern 

Description: IBM Transactional Database Pattern 


License Agreement: 

l$2 

Accepted [ View... ] 

Status: 

& 

Available [ Disable. = ] 

Required: 

IBM 

Database Patterns (1.1. 0.0 or above) 


Show me all Plug-ins in this pattern type 


Plug-ins: Disabled plug-ins required for configuration: 

g oltp/1.1.0.0 


0 Dependency 

Pattern Type name Status 

1 Foundation Pattern Type 2. 0.0.0 @T Available 

2 IBM Database Patterns 1. 1.0.0 |§f Available 

Figure 8-13 Viewing the IBM Transactional Database Pattern disabled plug-ins 

5. To complete the enablement of IBM Transactional Database Pattern VI .1 , you need to 
configure the OLTP plug-in. Either click the oltp/1 .1 .0.0 link or click Cloud System 
Plug-ins. 

In this example, click Cloud System Plug-ins and select IBM Transactional 
Database Pattern 1.1 in the System Plug-ins drop-down menu. 
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6. Find the oltp (1 .1 .0.0) plug-in in the list. The plug-in status has a warning symbol with an 
exclamation mark (Figure 8-14), which indicates that you need to configure the plug-in. 

System Plug-ins % 

Plug-in Name ti» 


IBM Transactional Database Pattern l.l| 


activator (2. 0.0.0) 


agent (2. 0.0.0) 


autoscaling (2. 0.0.0) 


deployinlet (2. 0.0.0) 


firewall (2. 0.0.0) 


foundation-license (2.0.0. 1) 


iaas.WCA (2.0. 0.0) 

M 

logbackup (2. 0.0.0) 

Av 

monitoring (2. 0.0.0) 

& 

oltp (1. 1.0.0] 

Av 

ssh (2. 0.0.0) 


troubleshooting (2. 0.0.0) 



Figure 8-14 IBM Transactional Database Pattern plug-ins 


7. To configure the plug-in, click the oltp (1 .1 .0.0) plug-in in the list. Then, click Configure in 
the upper right of the details pane (Figure 8-15). 



Figure 8-15 Configuring the OLTP plug-in 

8. The environment configuration window includes a drop-down menu where the 
administrator has the following licensing options: 

- Leave the plug-in unconfigured (None). 

- Enable the transactional database pattern for production environment (Only IBM 
Transactional Database Pattern). 
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- Enable the non-production environment of the transactional database (Only IBM 
Transactional Database Pattern for Non-Production Environment). 

- Enable both the production and non-production environments (Both). 

This example enables both production and non-production options (Figure 8-16). When 
done, click OK. 



Configuration 

^ Configure Dele 





Environment: 

feoth 1^1 


^ at 


None(disabled) \J 

Only IBM Transactional Database Pattern 

Only IBM Transactional Database Pattern for Non-Production Environment 
Both 







WA *jgl 




Figure 8-16 Selecting Configuration for the OLTP plug-in 


9. Click Cloud -> Pattern Types, and select the IBM Data Mart Pattern 1 .1 .0.0 entry. On the 
detail pane, select the Enable All link (Figure 8-17). 


Pattern Types 

Pattern Type 

Foundation Pattern Type 2.0 

Foundation Pattern Type 2. 0.0.0 
IBM Data Mart Pattern 1.1 

IBM Data Mart Pattern 1.1. 0.0 
IBM Database Patterns 1.1 

IBM Database Patterns 1.1. 0.0 
IBM Transactional Database Pattern 1.1 

IBM Transactional Database Pattern 1.1. 0.0 
Web Application Pattern Type 2.0 

Web Application Pattern Type 2. 0.0.0 
WebApp Pattern Type 1.0 

WebApp Pattern Type 1.0. 0.3 


1- + 


9 

Sr 

l?jg 

(®E3 

®T 

Sf 

Sr 

Sr 

& 

l?jg 

l®0 


IBM Data Mart Pattern 
Name: 

Description: 

License Agreement: 
Status: 

Required: 

Plug-ins: 

0 Dependency 


IBM Data Mart Pattern 
IBM Data Mart Pattern 
Not Accepted 
(?E 3 Not Accepted 
IBM Database Patterns [1. 1.0.0 or above) 
Show me all Plug-ins in this pattern type 


[Accept.. ] 


[ Enable All. ] 


Pattern Type name 

Status 

Foundation Pattern Type 2. 0.0.0 

9 

Available 

IBM Database Patterns 1. 1.0.0 

9 

Available 


Figure 8-17 Enabling the Data Mart Pattern 


10. In the Data Mart Pattern license window, click the IBM Data Mart Pattern 1.1 .0.0 link. 
Then, click Accept to accept the license. Click Done to close the window. The Pattern 
Types window refreshes, and the accepted patterns now display the correct status. 

1 1 .To use the Data Mart pattern type, you must configure the data mart system plug-in. Click 
datamart/1. 1.0.0 in the Plug-ins section, listed under disabled plug-ins required for 
configuration. This action opens the System Plug-ins with the Data Mart plug-in selected. 
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12. Click Configure (Figure 8-18). 



Figure 8-18 Data Mart System Plug-in details 

13.The environment configuration window contains a drop-down menu where the 
administrator has the following licensing options: 

- Leave the plug-in unconfigured (None). 

- Enable the Data Mart pattern for production environment 
(Only IBM Data Mart Pattern). 

- Enable the non-production environment of the data mart pattern (Only IBM Data Mart 
Pattern for Non-Production Environment). 

- Enable both the production and non-production environments (Both). 

This example enables both (Figure 8-19). Click OK. 



With the pattern types enabled, you can now use Virtual Application Builder to build any of the 
virtual application patterns. 

IBM Foundation Pattern 

IBM Foundation Pattern is a prerequisite to all the other pattern types that are included in IBM 
Workload Deployer. This pattern type’s license agreement is already accepted by default, but 
you still need to enable it. Sometimes this pattern is referred to as the shared services pattern 
type, because it contains plug-ins on which the other pattern types rely for basic and shared 
functions, such as caching, elastic load balancing, SSH, firewall, deployed VM agent, 
and activation. 

When you select each pattern type, its status and prerequisite pattern types are listed in the 
pattern’s detail pane on the right. The Foundation Pattern does not have a prerequisite 
pattern type. You can enable the Foundation Pattern by itself or as a prerequisite pattern type 
when you click any other pattern type’s Enable All ink. 
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8.2.4 Virtual Application Builder overview 


The Virtual Application Builder in the IBM Workload Deployer user interface supports the 
application-centric approach for deploying applications to the cloud by providing the means of 
creating virtual application patterns. 

A virtual application pattern consists of a combination of application components, links, and 
policies. The application component represents the middleware (such as WebSphere 
Application Server) to run the application instance. Links represent connections (such as 
JDBC), and policies represent the middleware configuration or quality of service. 

To access Virtual Application Builder, you must have at least the “Create new patterns” 
permission. 

Click Patterns Virtual Applications. By default, IBM Workload Deployer includes the 
following sample applications in the Virtual Application Patterns list (Figure 8-20): 

► Sample Java EE web application 

► Sample Web Application Only 

► Secured Java EE web application 

These samples demonstrate the capabilities of IBM Workload Deployer virtual application 
pattern support. 


Virtual Application Patterns 

% i^a 

# 

Name 


n- 

Web Application Pattern Type 2.0 

Sample Java EE web application 

□ 


Sample Web Application Only 

□ 


Secured Java EE web application 

□ 



Figure 8-20 Virtual Application Patterns sample applications 


The icons that display above the list of patterns (Figure 8-20) depend on the level of 
permissions that the user has to the resources. From left to right, the buttons are as follows: 


The Refresh icon ( < 9 , ) refreshes the page. 


The Import icon ( ^) imports a virtual application pattern. 
The New icon (f^l) creates a virtual application pattern. 


Select Secured Java EE web application in the Virtual Application Patterns to open the 
pattern and view its contents. The details pane provides information about the application, its 
application identifier, a preview of its contents, and the access that is granted to 
the application. 
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The access that is granted is important. If you create an application and want others to be 
able to open or deploy it, select the appropriate access from the drop-down menu. By default, 
the samples are accessible by everyone (Figure 8-21). 


Secured Java EE web application 

Deploy ^ Open ^ Export X Delete [Tp Clone 

Application ID: 

a-da9ffd64-838a-420b-b251-6404225e2ec7 

Description: 

HitCount is a secured Java EE web application demonstrating how to 
increment a counter with WAS, TDS, and DB2. Access HitCount via 

Created by: 

Last Modified by: 
Created on: 

Last Modified on: 

http://[IP]:90S0/hitcount, where [IP] is the IP of the deployed WAS VM. 

cbadmin 

cbadmin 

Nov 5, 2011 12:03:40 AM 
Nov 5, 2011 12:03:40 AM 

Preview: 

111 — 

> LLi*l 

Access granted to: 

Administrator [owner] 
Everyone [read] [remove] 

Add more... ^ 

m 


Figure 8-21 Sample application security permissions 

The following icons are available on the detail page: 


► The Deploy icon 

( & Deploy ) deploys the application to the cloud. 

► The Open icon ( 

# Open ) 

allows you to open and edit the virtual application 

► The Export icon i 

► The Delete icon ( 

► The Clone icon ( 

[ udi Expor 

t ) exports the virtual application. 

X Delete 

) deletes the virtual application, 
l creates a copy of the virtual application. 

ip Clone ) 


Click the Open icon to edit the Secured Java EE web application. A new tab or browser 
window opens, depending on your browser preference settings. 

When you open a virtual application pattern or upload an application component (such as an 
EAR, WAR, EBA, SQL, or DDL file), the file is scanned to inspect and gather information 
about the artifact and its dependencies. The scanning status messages show across the top 
of the Virtual Application Builder canvas when you open the Secured Java EE web 
application (Figure 8-22). 


(T) Artifact artifactsyCounterDB.sqr in component database" was scanned [x] Close 
Figure 8-22 Resource inspection in Virtual Application Builder 
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Virtual application resource scanning looks for registered extensions to scan resources when 
they are uploaded or opened in Virtual Application Builder. The resources’ input streams 
(such as EAR, WAR, or EBA files) are parsed and searched for modules, deployment 
descriptors, extensions, and bindings. When classes are found, they are scanned for 
annotations. The results are combined, and the application builder uses these results for error 
checking, to display warnings about missing information, and to display options on the 
components for links. 

Diagram view 

Figure 8-23 shows the Virtual Application Builder open to the Diagram tab. The view opens 
with this tab selected, which is the graphical user interface that is provided to create virtual 
application patterns. 



Figure 8-23 Virtual Application Builder layout 

The Assets section in the left pane lists expandable components (or drawers) in the 
following categories: 

► Application Components 

► Database Components 

► Messaging Components 

► OSGi Components 

► Transaction Processing Components 

► User Registry Components 

► Other Components 

Each drawer contains components that you can drag to the canvas and then configure. 

The middle pane of the window is the canvas. This area is the work area where you can drag 
components and link them to create virtual applications. 

The right pane of the window displays properties for the currently selected component in the 
canvas or displays properties of the application if nothing is selected. 
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The component categories include the following content: 

► Application Components 

- Additional archive file: Specify an archive file that contains additional files that are 
needed by an EAR or WAR file. 

- Enterprise Application: Deploy an EAR file to WebSphere Application Server in 
the cloud. 

- Existing Web Service Provider Endpoint: Use an IP and port to connect to an existing 
web service. 

- Policy Set: Associate a policy set and binding to a service provider or client. 

- Web Application: Deploy a WAR file to WebSphere Application Server in the cloud. 

► Database Components 

The contents in this section varies depending on whether the Database Patterns 
are accepted. 

- Data Studio Web Console: A database tool for monitoring databases; available after 
enabling IBM Database Patterns. 

- Database DB2: Deploy a DB2 server to the cloud; available after enabling either IBM 
Data Mart Pattern or IBM Transactional Database Pattern. 

- Three Existing Database Components to configure a JDBC or JCA connection 
between the WebSphere Application Server and an existing database. 

• Existing Database DB2: Connect to an existing DB2 database; if connecting to DB2 
for z/OS, consult the requirements listed at the following address: 

http : //publ i b . boul der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. we 
bapp . doc/ap/apc_prodreqs . html 

• Existing Database Informix: Connect to an existing Informix database. 

• Existing Database Oracle: Connect to an existing Oracle database. 

The Existing Oracle Database Component requires the Oracle 1 1 .2.0.1 (or higher) 
Thin JDBC driver and a configured Oracle system plug-in. 

The DB2 and Informix Existing Database Components use the IBM Data Server Driver 
for JDBC (JCC) Package to create the JDBC connection. 

- Existing IMS Database: Connect to an existing IMS database. 

To use the existing IMS Database Component, you must have the IMS Universal DB 
Resource Adapter-JDBC XA Transaction resource archive (RAR file) that is required to 
connect to the version of IMS database that you are using. 


Connect to an existing resource: Connecting to an existing resource means 
configuring a connection between the application and the existing resource, which 
usually means a JDBC connection or a JCA connection. 


► Messaging Components 

- Existing Messaging Service: Connect to an existing WebSphere MQ 
messaging service. 

- Existing Queue: Connect to a queue on an existing WebSphere MQ 
messaging service. 

- Existing Topic: Connect to a publish / subscribe topic on an existing WebSphere MQ 
messaging service. 
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► OSGi Components 

- Existing OSGi Bundle Repository: Provide a URL to an existing OSGi 
bundle repository. 

- OSGi Application: Deploy an OSGi EBA file to WebSphere Application Server in 
the cloud. 

► Transaction Processing Components 

- Existing CICS Transaction Gateway: Connect to an existing CICS Transaction 
Gateway instance. 

To use this component, you must have the CICS Java EE ECI Resource Adapter that 
is required to connect to the Transaction Gateway, and you must configure the wasctg 
system plug-in. 

- Existing IMS TM: Connect to an existing IMS transaction manager. 

To use this component, you must have the required IBM Transaction Manager 
resource archive (RAR file) to connect to your system. 

► User Registry Components 

- Existing User Registry IBM Tivoli Directory Server: Connect to an existing IBM Tivoli 
Directory Server LDAP service that provides a user registry for container 
managed security. 

- Existing User Registry Microsoft Active Directory: Connect to an existing Microsoft 
Active Directory server that provides a user registry for container managed security. 

- User Registry Tivoli Directory Server: Deploy an IBM Tivoli Directory Server LDAP user 
registry to the cloud to provide container-managed security. 

► Other Components 

- Generic Target: Use to open outbound TCP connections from an application to a 
specified host and port. 

The Diagram view has the following menu buttons in the upper left: 

► Save: Saves the pattern to the current name or prompts for a name. 

► Save As: Saves the pattern to a different name. 

► Layout: Snaps the components on the canvas to a grid layout. 

► Undo: Undoes the last action, such as moves or deletes. 

► Redo: Redoes the last action undone. 

On the far right, there is a Hints wizard that displays information about steps to be performed 
on the builder. 
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ListView tab 

Click the ListView tab (Figure 8-24). This view removes the graphical layout and presents 
each component and connection as an expandable section. Each section contains the current 
property values for each of the components or links. 


Diagram 
Ml Save 


ListView 


Source 


0. Save As | Undo 


t£> Redo 


♦J [ Virtual Application 


+ ^ 4 application - Enterprise Application {WebSphere Application Server) 


♦J database- Database (DB2) 


♦ i User Registry - User Registry (Tivoli Directory Server) 


*} 0 application — ► database - DB2 Data Source 


application — ► User Registry - Remote LDAP registry 


*} application — ► User Registry - Remote LDAP registry 


Figure 8-24 Virtual Application Builder ListView 


Both the ListView and the Diagram view allow you to enter or change values of the properties 
(assuming that the user has the “Create new patterns” permission). Both views contain 
validation logic for entries when appropriate. 
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Source view 

The third view is the Source view (Figure 8-25), and it formats and displays the 
appmodel . json file. This file is the main file that is created when you use Virtual Application 
Builder. The Source view is read-only. 


Diagram 


ListView 


Source 


HI Save 4 Save As 


"model " : { 

"name": "Secured Java EE web application", 

"nodes" : [ 


{ 


"departmental_OITP . json" 


"attributes" : { 

" archive " : " ar t i f acts/Hi tCount App . ear 11 , 

" WAS_Version " : "7.0", 

" totalTranLif et imeTimeout " : 120, 

" asyncResponseT imeout " : 120, 

"client Inactivi tyTimeout " : 60, 

" propogatedOrBMTTranli f et imeT imeout " : 30 0 


}. 

" id" : 

" type 11 


"application" , 
: "EAR" 


1 , 


"attributes" : { 

"dataSizeForWorkload" : 

"sqlType" : "DB2", 

" dbname " : " mydb " , 

" dbSQLF i le " : " art i f acts/CounterDB . sql 11 , 

" purpose " : " pr oduc t i on " , 

" workloadStandard" : 




Figure 8-25 Virtual Application Builder Source 


Components 

After exploring the views, switch back to the Diagram view. The canvas is the work area for 
the Virtual Application Builder Diagram view. You should still have the Secured Java EE web 
application open for the following discussion (Figure 8-22 on page 185). 
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This example uses Virtual Application Builder extensively. Click the Enterprise Application 
component in the canvas. The Properties pane on the right is populated with the properties 
for the component. If you hover your cursor over a field label in the Properties pane, help 
content is displayed to explain the field’s purpose. Any property with a red asterisk next to the 
label is a required entry. See Figure 8-26. 


Enterprise Application 


7 


Name: * 


application 

EAR File: * 

Browse Delete 

Total transaction lifetime timeout (sec): 

120 

Async response timeout (sec}: 

120 

Client inactivity timeout (sec): 

60 

Maximum transaction timeout (sec): 

300 

Interim fixes URL: 

Click select button to update 

Select ▼ 


Figure 8-26 Enterprise Application Properties pane 


This window displays the following properties specific to the 
Enterprise Application component: 

► Name: Part identifier for the component in the virtual application. 

► EAR File: Currently contains the HitCountApp.ear application file. Use the Browse and 
Delete buttons to manage the file that is currently selected for the component. The file is 
validated for type (EAR file) and then scanned when it is uploaded to the 

appliance storehouse. 


Storehouse note: The storehouse is the location to which resources that are contained 
by applications are uploaded in the appliance. Other files stored in the storehouse are 
JSON configuration files that are created by Virtual Application Builder or that are 
created during application deployment, pattern plug-in files, and files that are uploaded 
to configure plug-ins. 


The properties listed under the EAR File entry configure the WebSphere Application 
Server that is deployed to run the application. Most properties contain default values. 

► Total transaction lifetime timeout (sec): Specifies the default maximum time, in seconds, 
that is allowed for a transaction that is started on the server. 

► Async response timeout (sec): Specifies the amount of time, in seconds, that the server 
waits for responses to Web Services Atomic Transaction (WS-AT) protocol messages. 
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► Client inactivity timeout (sec): Specifies the maximum duration, in seconds, between 
transactional requests from a remote client. Any period of client inactivity that exceeds this 
timeout results in the transaction being rolled back in this server. 

► Maximum transaction timeout (sec): Specifies, in seconds, the upper limit of the 
transaction timeout for transactions that run in this server. This value should be greater 
than or equal to the value that is specified for the total transaction timeout. 

► Interim fixes URL: Specifies the location or URL of selected interim fixes to be applied to 
the deployed server. This URL is used by WebSphere Application Server VM to download 
interim fixes. You configure these URLs by clicking Catalog -» Emergency Fixes -» 
Select. You must have at least “Create new catalog content” permissions. 

If you have any component selected in the canvas, n click the question mark (?) icon in the 
upper right of the Properties window to obtain information about the component, its 
properties, and the links and policies that are associated to it. For example, aside from these 
properties, the Enterprise Application component Help menu has information about incoming 
and outgoing connections that can be made. 

The icons across the upper right of the Enterprise Application component are available on 
components when applicable (for example, on the Web Application component) (Figure 8-27). 
The right side displays a connector dot for creating links. 


& ■£■ Ta X 

Enterprise Application 

application 

Figure 8-27 Component menu options 


From left to right, these icons provide the following actions: 

► Switch to mini view ( ^| ) 

Switches the component to a smaller scale layout on the canvas to save space. Toggles 

to the Switch to standard view icon. 


► 


Switch to standard view 




Switches the component to the larger scale layout on the canvas. Toggles to the Switch 
to mini view icon. 


► 


Add a component policy ([ 


Based on the type of component, allows you to add policies, such as Routing Policy, Log 
Policy, JVM Policy, and Scaling Policy. 
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► Add to my palette ( faj ) 

Saves the component as a reusable component. The configured component (with the 
configured properties) can be reused when using the Virtual Application Builder. The 
component type (enterprise application, for example) has additional artifacts to choose 
from that are selectable from a marker to the right side of the palette component 
(Figure 8-28). 


Assets 


Add policy for application 

M 



▼ Application Components 
Additional archive file 

Enterprise Application 

A 4S 

application 


Figure 8-28 Component saved as a reusable component 


► Remove component ( [x| ) 

Removes the component from the canvas. 

Incoming and outgoing connections 

Figure 8-29 shows the enterprise application component has an incoming connection from 
the web application and the web application has an outgoing connection to the 
enterprise application. 


0 Web Application ^ Enterprise Application 

Web Application Enterprise Application 

Figure 8-29 Link incoming and outgoing connections 

The following incoming connectable components are available for the 
Enterprise Application component: 

► Enterprise Application: An enterprise application (WebSphere Application Server) cloud 
component represents an execution service for Java EE enterprise applications 

(EAR files). 

► Web Application: A web application cloud component represents an execution service for 
Java EE Web applications (WAR files). 

The following outgoing connectable components are available for the Enterprise Application 
component: 

► Existing Topic: An existing topic represents a message destination on an external 
WebSphere MQ messaging service through which messages are published 

and subscribed. 

► Additional archive file: An additional archive file component for your primary archive 

► Existing Messaging Service: An existing messaging service represents a connection to an 
external messaging system (WebSphere MQ). 
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► Existing Database: An existing Oracle Database component represents a connection to 
an existing Oracle database instance running remotely outside of the cloud. The 
configuration properties allow a connection to be made to the remote Oracle database. 

► Policy Set: A component used to define quality of service policies. 

► Generic target: A component used to open the firewall for outbound TCP connections from 
a web or enterprise application to a specified host and port. 

► Database: A Database (DB2) component represents a pattern-deployed 
database service. 

► Existing Database DB2: An existing DB2 database component represents a connection to 
a remote DB2 database instance running remotely outside of the cloud. The configuration 
properties allow a connection to be made to the remote DB2 database. 

► Existing Database (Informix): An existing Informix database component represents a 
connection to a remote Informix database instance running remotely outside of the cloud. 
The configuration properties allow a connection to be made to the remote 

Informix database. 

► Existing CICS Transaction Gateway: An existing CICS transaction gateway component 
represents a connection to an existing CICS transaction gateway instance running 
remotely outside of the cloud. The configuration properties allow a connection to be made 
to the CICS transaction gateway. 

► Existing IMS Database: An existing IMS database system. 

► Existing User Registry (IBM Tivoli Directory Server): An existing user registry (LDAP) 
cloud component represents an existing LDAP service that can be attached to a web 
application component or an enterprise application component. The LDAP service 
provides a user registry for container-managed security. 

► Existing User Registry (Microsoft Active Directory): An existing user registry (LDAP) cloud 
component represents an existing LDAP service that can be attached to a web application 
component or an enterprise application component. The LDAP service provides a user 
registry for container-managed security. 

► User Registry: A user registry (Tivoli Directory Server) cloud component represents a 
pattern-deployed LDAP service that can be deployed by itself or attached to a web 
application component or an enterprise application component. The LDAP service 
provides a user registry for container-managed security. 

► Existing IMS TM: An existing IMS transaction manager. 

► Enterprise Application: An enterprise application (WebSphere Application Server) cloud 
component represents an execution service for Java EE enterprise applications 

(EAR files). 

► Web Application: A web application (WebSphere Application Server) cloud component 
represents an execution service for Java EE web applications (WAR files). 

► Existing Web Service Provider Endpoint: A web service provider provided by a 
remote server. 

► Existing Queue (WebSphere MQ): A message queue on an external WebSphere MQ 
messaging service through which messages are sent and received. 
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Database Component properties 

Select the Database Component on the canvas so that the properties are displayed on the 
right pane (Figure 8-30). 


3 


Database 


7 


Name: * * 
database 


Database Name: * 
mydb 

Database Description: 


Purpose: 

Production 


T Source 


Apply a database workload standard| 
Maximum User Data Space (GB): 

1 


Name 

Departmental 

Transactional 

QData Mart 


Workload Type 

Departmental 

Transactional 

Data Mart 


Database Compatibility Mode: 

DB2 [Default} 

Schema File: 

| a rtifa cts/C o u nte rD B . sq l | Browse || Delete | 


Figure 8-30 DB2 Database Component properties 


This window displays the following Database Component properties: 

► Name: Specifies the identifier for this component. 

► Database Name: Specifies the database name that you want to create and deploy. 

► Database Description: Describes the database. 

► Purpose: Chooses the license type to use. 

► Source: Chooses one of the following options: 

- The “Clone from database image” option displays the available database images that 
you can use to deploy a cloned database. 

- The “Apply a database workload standard” option requires the following 
additional information: 

• Maximum User Data Space (GB): Specifies the maximum size of user data space 
in the database that you want to deploy. 

• Database Workload standards: Specifies either a Transactional Database or Data 
Mart. 
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• Database Compatibility Mode: Specifies a default DB2 configuration or 
Oracle-compatibility for the database that you want to deploy. See Oracle to DB2 
Conversion Guide: Compatibility Made Easy, SG24-7736 for information about 
Oracle compatibility in DB2 9.7. 

• Schema File: Specifies the schema file (*.ddl or *.sql) that defines the 
database schema. 

Click the link between the enterprise application and database components (Figure 8-31). 



The link turns orange when it is selected and an Edit and Delete icon appears next to it. 

The Web, Enterprise, and OSGi Application to Database links represent a connection 
between a web, Java EE, or OSGi application running on WebSphere Application Server and 
the database instance. Use this link to specify data source properties, such as a JNDI name 
or names. 

The uploaded application component is scanned for existing resource references, so the 
JNDI name entry is available for the developer to provide additional required link information. 
If resource references are found, they are available by clicking the Select button. 

The properties for the link are in the right pane (Figure 8-32). 


0 Enterprise Application -*■ Database 


application database 


JNDI Name of Data Source: 



Non-Transactional Data Source:* 
Maximum Connections: * 

10 

Connection timeout: * 

180 


Figure 8-32 JDBC link properties 
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The properties for the link include: 

► JNDI Name of Data Source: Specifies the JNDI name of your data source. 

► Resource References of Data Source: Specifies resource references of your data source. 

► Non-Transactional Data Source: Indicates whether this data source is used for 
non-transactional access to the data source. A non-transactional data source is typically 
required by applications using JPA where it is needed in addition to a standard 
transactional Data Source. 

► Maximum Connections: Specifies the total maximum number of connections to 
a database. 

► Connection timeout: Specifies the number of seconds that a connection request 
remains active. 

Continue exploring the additional components available in the builder by dragging each one 

to the canvas, viewing their properties, and using the Help menu to assist in their usage. 

Saving and locking the virtual application (and creating a template) 

When saving an application, you can choose to save it as a template, and you can lock the 

pattern type (Figure 8-33). 


□ Virtual Application 
Name: * 

Sample Java EE web application 
Description: 

DayTraderLite is a Java EE web a 
application simulating a stock 
trading syste m with WAS a n d D B 2 . v 

Type: * 

Application 

Template 

Locked pattern type: 

Figure 8-33 Virtual application properties 

To save as a template, select Template. If you have multiple components configured in a 
manner that you can reuse, saving the application as a template makes reusing them easy. 
The virtual application template is a predefined set of components and a configuration that is 
used to simplify and standardize the creation of virtual application patterns. A virtual 
application template can be selected when building a virtual application pattern in the Virtual 
Application Builder. You can create templates or use existing virtual application templates 
that are shipped with the product. 
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After you save an application as a template, you can access the template by clicking 
Catalog Virtual Application Templates. Figure 8-34 shows My Trade Template, a 
template that was created from a web application component and a database component, 
and saved as a template. 


Welcome Instances Patterns 

Catalog 

Virtual Application Templates 

% 1^3 <#> 

Name 

Ti- 

Web Application Pattern Type 2.0 

| T 

Blank application 


Blank Java EE web application 

m 

My Trade Template 



Figure 8-34 Virtual Application Templates 

You can deploy, edit, export, clone, and delete application templates from this window 
(Figure 8-35), just like regular applications. Templates are also available as a pattern template 
when you create an application from Virtual Application Builder. 


Create Application 

Start building your virtual application. 

Choose one template of selected pattern type to start building your virtual application. 


Pattern type 


Web Application Pattern Type 2.0 


Blank application 

Blank Java EE web application 

My Trade Template 


© More information 


Description: 

Blank application 

Preview: 



Start Building 


Cancel 


Figure 8-35 Create application template options 


Select Locked pattern type (Figure 8-33 on page 197) if you want to lock the pattern type 
and plug-in versions that are associated with the application (for example the Web Application 
Pattern V2. 0.0.0 contains the WebSphere Application Server plug-in V2.0.0.0). 
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If the pattern type version is upgraded on the appliance, some of the plug-ins used by the 
application might be upgraded. If you lock the pattern type in an application, the current 
plug-ins versions are recorded. Even if the pattern type is upgraded on the appliance, the 
application continues to use the previous version of plug-ins. This setup can be helpful if 
application development and testing were performed on a specific version pattern type before 
release to production and you want to strictly control when newer version plug-ins might 
be used. 


8.2.5 Policies 

Policies that are associated with the virtual application typically influence how cloud 
infrastructure resources and virtual application pattern components are allocated for a 
given deployment. 

For example, a single virtual machine running the web application is provisioned when a web 
application component is deployed by itself. A scaling policy that is associated with a web 
application results in multiple virtual machines, equal to the cluster size that you specify for 
the scaling policy, and a set of caching service components that facilitate session replication 
across the cluster of web applications. A routing policy provisioned in addition to the scaling 
policy sets up an elastic load balancer cloud component that is used for routing requests 
dynamically across the cluster. 


Combined policies: Combine the routing policy with a scaling policy to provide elastic 
load balancing across the cluster. 


You can add the following types of policies either to an application or to a component: 

► Routing Policy 

► Log Policy 

► JVM Policy 

► Scaling Policy 

Application policies are added using the “Add policy for application” option on the Virtual 
Application Builder canvas. When you add a policy to an application, it displays as a new part 
on the canvas, and you must configure it. The policies that are available for the application 
depend on the components that are currently on the canvas (Figure 8-36). If the canvas is 
empty, there is no content in the Add Policies drop-down menu. 


! Add policy for applicatio 
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Figure 8-36 Application policies 
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Component policies are added using the Add a component policy icon ( |^| ) on the 
individual components (Figure 8-37). 


application 


| Add Policies k 
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JVM Policy 

h 

Scaling Policy 


Figure 8-37 Component policies 


Individual components have policies available that are relevant to the component type. When 
you add a policy to a component, it displays inside the component on the canvas and requires 
configuration. When you select the component policy (for example, the Routing Policy shown 
in Figure 8-38), the properties for the policy display in the Properties pane to the right. The 
warning symbol in Figure 8-38 shows that the virtual host name for the application is missing 
(such as www.ibm.com). 
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Figure 8-38 Component policy and its properties 


Routing policies 

Consider the example of a routing policy that is a client policy for the proxy shared service. It 
provides routing and load balancing to multiple deployed web applications and supports both 
HTTP and HTTPS requests. To enable an application to use the Elastic Load Balancing 
(ELB) shared service, you must add a routing policy to provide a virtual host name and a 
request protocol for the application. 
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ELB Proxy Service: The ELB Proxy Service must be running in the cloud group to which 
you are deploying the application. For more information, see 8.3.3, “ELB proxy service” on 
page 216. 


Web archive (WAR files), enterprise archive (EAR files), and OSGi applications are 
supported components for the routing policy. You also need to specify a scaling policy to 
declare how many application servers are used to host the application, so that ELB can 
balance incoming requests to the application servers. 


Add a routing policy to your application by clicking the Add policy icon (| |) on the 
component (that is the WAR file, EAR file, or OSGi application) and selecting Routing 
Policy. Then, complete the properties for the Routing Policy (Figure 8-39). 


hs Routing Policy 
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HTTP:|H| 

HTTP S: □ 

Virtual Hostname: * 


Figure 8-39 Routing Policy properties 


Scaling policies 

Scaling provides the runtime capability to scale the application platform as the load changes. 
A scaling policy component defines this capability and the conditions under which scaling 
activities are performed for your application. You add a scaling policy to your application by 
clicking the Add policy icon ( | | ) on the component (that is, the WAR file, EAR file, or 
OSGi application). 


Caching Shared service: The Caching Shared service must be running in the cloud 
group to which you are deploying the application if you have a scaling policy that has the 
“Enable Session Caching” option enabled (the default). 


When added, the component details contain an additional section (Figure 8-40). 
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Figure 8-40 Scaling policy properties 
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The following properties display in this window: 

► Enable session caching: Specifies whether to use the session caching function in your 
application. If this option is enabled, the shared caching service is used for session 
storage, providing failover support. 

► Scaling Type: You can select from the following scaling types: 

- Static 

- CPU based 

- Response Time Based 

- Web to DB 

► Number of instances: Specifies the number of cluster members that are hosting the web 
application. The default value is 2. Acceptable values are 2-10. 

The following properties are required for each scaling type: 

► Static 

Indicates that multiple instances are created and that the number of instances remains 
static. New instances are not started and existing instances are not removed at 
run time. 

► CPU Based 

Indicates that the action of adding or removing instances is triggered by average 
processor usage of existing instances. Set the following options: 

- Scaling in/out when CPU usage is out of threshold range (%) 

Specifies the processor threshold condition to start scaling activity. When the average 
processor utilization of your application platform is out of this threshold range, your 
platform is scaled in or out. The default value is 20% - 80%. Acceptable values are 
0 % - 100 %. 

- Instance number range of scaling in/out 

Specifies the scaling range for the instances, for example, the cluster members that 
host the web application. Acceptable values are 1 - 50. 

- Minimum time (sec) to trigger add/remove 

Specifies the time duration to start scaling activity. The default value is 120 seconds. 
Acceptable values are 30 - 1800. 

► Response Time Based 

Indicates that the action of adding or removing instances are triggered by average web 
application response time of existing instances. Set the following options: 

- Scaling in/out when Web response time is out of threshold range (ms) 

Specifies the web application response time condition to start scaling activity. When 
the response time of your web application is out of this threshold range, your platform 
is scaled in or out as appropriate. The acceptable values are 0 - 1000 ms. 

- Instance number range of scaling in/out 

Specifies the scaling range for instances, for example, the cluster members that are 
hosting the web application. Acceptable values are 1 - 50. 

- Minimum time (sec) to trigger add/remove 

Specifies the time duration condition to start scaling activity. The default value is 120 
seconds. Acceptable values are 30 - 1800. 
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► Web to DB 

Indicates that the action of adding or removing instances is triggered by the connection of 
multiple performance metrics, including average web application response time, JDBC 
connection wait time, and JDBC connection use existing instances. The scaling action is 
triggered when one of the metrics is out of threshold ranges. Set the following options: 

- Scaling in/out when Web response time is out of threshold range (ms) 

Specifies the web application response time condition to start scaling activity. When 
the response time of your web application is out of this threshold range, your platform 
is scaled in or out as appropriate. The acceptable values range from 
0 ms - 1000 ms. 

- When JDBC connections wait time is out of the threshold range (ms) 

Specifies JDBC connection wait state to start scaling activity. When the wait time of 
JDBC connections is out of this threshold range, your platform is scaled in or out. The 
acceptable values are 0 - 10000 ms. 

- When JDBC connection pools usage is out of the threshold range(%) 

Specifies the JDBC connection pool usage to start scaling activity. When the JDBC 
connection usage is out of this threshold range, your platform is scaled. The 
acceptable values range from 0% - 100%. 

- Instance number range of scaling in/out 

Specifies the scaling range for instances, for example, the cluster members that are 
hosting the web application. Acceptable values are 1 - 50. 

- Minimum time (sec) to trigger add/remove 

Specifies the time duration condition to start scaling activity. The default value is 120 
seconds. Acceptable values are 30 - 1800. 


Log policy 

The log policy specifies the configuration for log records. Add a logging policy to an 
application by clicking the Add policy icon ( < . ■ ) on the component (that is, a WAR file, EAR 
file, or OSGi application). 


Use log details levels (Figure 8-41) to control which events are processed by Java logging. 


Log Policy 


Log Detail Levels: 

*=info 

Figure 8-4 1 Log policy properties 

Learn more about WebSphere Application Server log level settings at the following address: 

http : //publ ib. boulder. ibm.com/infocenter/wasinfo/v8r0/ index. jsp?topic=/com.ibm.web 
sphere. express. doc/i nfo/exp/ae/utrb_l ogl evel .html 
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JVM Policy 

The JVM Policy (Figure 8-42) allows you to control the underlying Java virtual machine. 
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Figure 8-42 JVM policy properties 


The following properties are in this window: 

► Enable debug: Start the JVM in debug mode. 

► Debug port: The port the JVM listens on for remote connections. 

► Client (IP or IP/netmask): Optional IP address of the debug client. 

► Enable Verbose Garbage Collection: Specifies whether to use verbose debug output for 
garbage collection. 

► Generic JVM arguments: Specifies additional command-line arguments for the JVM. 

► Set minimum and maximum JVM heap size (in MB): Defines the minimum and maximum 
JVM heap size using the slide rule. 
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8.2.6 Reference layering 

You can use the Virtual Application Builder to create virtual application layers that provide a 
way for you to control the complexity of your virtual application and to reuse virtual 
applications. The layering function in Virtual Application Builder is at the bottom of the 
diagram view’s Assets pane, under the components (Figure 8-43). It is collapsed by default. 
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Figure 8-43 Layers capability in the Virtual Application Builder 


The following layering options are available: 


► 

► 


The Create a new layer icon (|S) creates a new empty layer. 


Use the Add icon (| j) to import a virtual application as a new separate 
reference layer. If the referred application is updated, other applications 
updated automatically. 


layer called a 
that refer to it are 


The Delete icon (||]) deletes all components in the layer and the layer itself. 

The Enable or disable this layer icon (g) is a toggle icon that enables or disables the 
selected layer. The disabled layer is unavailable and cannot be modified. Click the icon 
again to enable the selected layer. 


The layer is a generic container in a virtual application for a collection of components. It helps 
you to control the complexity in the application diagram by disabling or enabling layers and 
also to reuse the application by importing an existing application as a reference layer. By 
default, a virtual application consists of one layer when you first create it. When you use 
application layering, you can modify an existing virtual application by adding separate layers. 


A virtual application can contain multiple layers. A layer can contain component types of the 
virtual application, or the layer can reference another virtual application, which is called a 

reference layer. 
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The following simple example can help clarify the layering process: 

1 . Drag a web application component and an existing database (DB2) component to the 
Virtual Application Builder canvas. If you want, you can configure these components with 
values. You can use any WAR file and IP and port number because you do not deploy it. 

2. Click Create a new layer. The two components on the canvas are added automatically to 
the first layer (“layer”) and a second layer (“Iayer2”) is created. 

3. Drag a User Registry (Tivoli Directory Server) to the canvas. It is added automatically to 
Iayer2 (Figure 8-44). 
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Figure 8-44 Two layers in the virtual application 


4. Click Enable/Disable on Iayer2. As shown in Figure 8-45, Iayer2 is disabled and the User 
Registry component in Iayer2 is now disabled for updating. The “layer” components are 
still visible. 
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Figure 8-45 Layer2 is disabled 
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5. Click Enable/Disable on Iayer2 to enable it and on layer to disable it. Now, the component 
in Iayer2 is available, but not the components in layer (Figure 8-46). 



User Registry 


® Iayer2 tit 
User Registry 


Figure 8-46 Layer is disabled, Iayer2 is enabled 


As this example shows, you can divide functions and responsibilities by layer and use the 
enabling and disabling function to reduce complexity of the visual layout of a virtual 
appliance. You can make connections between layers when both layers are enabled. 

Because there is no predefined set of layers or binding between a component type and a 
particular layer, you can create layers according to your business goals. You can place a 
component type in a virtual application in only one layer; however, you can move parts 
between the layers by clicking the layer name in the component and selecting the new layer 
from a drop-down menu. 


The following example creates a new virtual application by adding the Sample Java EE web 
application as a reference layer and then adding components to the application: 


1 . Start building a new blank virtual application using Web Application Pattern Type V2.0 in 
the Virtual Application Builder. 


2. Click the Add icon ( ) in the Layers section to import a virtual application as a reference 

layer (Figure 8-47). 
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Figure 8-47 Add a reference layer 


3. Select the Sample Java EE web application from the virtual application name list and 
click Add. 
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4. Add a User Registry component to the application (Figure 8-48). If the Sample Java EE 
web application is updated at any point (for example, with a WAR file, database, or link 
information), this new layers-based application gets the update automatically. 


Enterprise Application 
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application database 

I User Registry 
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Figure 8-48 Reference layer application 


Naming note: The layer name for the components imported from the Sample Java EE 
web application matches the application. This naming convention identifies these 
components as components from a reference layer application. 


8.2.7 Application sharing 

IBM Workload Deployer uses permissions to control how different users interact with virtual 
applications and the cloud. Permissions must be assigned to individual users or user groups 
that designate the types of objects (such as cloud groups or virtual application patterns) that 
they are authorized to access and the operations that they can perform. 

The scenario described in this section requires that a developer share an application with a 
tester. This type of scenario provides an example of how to share applications between users 
effectively on an appliance. 

By default, all users created on IBM Workload Deployer have the “deploy patterns in the 
cloud” permission. For a developer to create new virtual application patterns, the developer 
must have the “create new patterns” permission. After creating the pattern, by default, only 
the creator of that application has permissions to that application (except for any user with 
“Appliance administration-Full permissions”). 
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In this example, a user with “Create new patterns” permission, named itso_developer, 
created an application named ITSO sample application. Figure 8-49 shows the details of the 
application pattern after it is saved. As indicated in the figure, the “Access granted to” field in 
the virtual application’s detail pane indicates that only itso_developer has permission to 
the application. 


Virtual Application Patterns % ^ trade example application ^ Deploy Open g£\ Export X Delete 


Name 

^ _ 

Description: 

ITSO sample application 

Web Application Pattern Type 2.0 




Created by: 

itso_developer 

Sample lava EE web application 

□ 



Last Modified by: 

itso_developer 

Sample Web Application Only 

□ 



Created on: 

Nov 11, 2011 10:52:37[AM 

Secured Java EE web application 

□ 


Last Modified on: 

Nov 11, 2011 10:54:27 AM 

trade example application 

□ 



E© > G 


Access granted to: 

Itso Developer [owner] 

Add more... 






Pattern type: web Application Pattern Type 2.0 (tf 1 

Figure 8-49 Application permissions 
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A user with only the “Deploy patterns in the cloud” permission, named itso_tester, needs to 
deploy and test that application. When this user logs on to IBM Workload Deployer and clicks 
Patterns Virtual Applications Patterns, the user cannot deploy the application because 
it is not listed as available (Figure 8-50). 


Welcome Instances Patterns 

Catalog 

Virtual Application Patterns 

* 

Name 

n- 

Web Application Pattern Type 2.0 

Sample Java EE web application 

□ 

Sample Web Application Only 

□ 

Secured Java EE web application 

□ 


Figure 8-50 Viewable applications based on granted access 

The application pattern is hidden from itso_tester because this user does not have 
permissions to see the resource. In this case, itso_developer needs to grants access either to 
everyone (a default group in IBM Workload Deployer), to itso_tester, or to a group of users 
who contain itso_tester (Figure 8-51). 


Itso Developer [owner] 


Access granted to: 




T 


Pattern type: 

Itso Tester 
Everyone 






Figure 8-5 1 Granting application access to users or groups 


In addition to users and groups who are granted access to an application pattern, any user 
that has “Appliance administration-Full permissions” can also see virtual application patterns 
that are created by other users. This level of permission is useful for a development or test 
team lead that needs to be able to access all application patterns on the appliance. 

You can find a full description of IBM Workload Deployer permissions in the product’s online 
help at the following address: 

http://publib.boulder.ibm.com/infocenter/worlodep/v3rlm0/topic/com.ibm.worlodep.do 
c/aa/aac_user_permi ssi ons . html 


210 


IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 



8.3 Shared services 


Shared services are predefined virtual application patterns that can be deployed and shared 
by multiple application deployments (virtual applications, virtual systems, and virtual 
appliances) in the cloud (Figure 8-52). They provide certain runtime services to multiple 
applications or services to users on behalf of multiple applications. Shared services create a 
simplified consumer (users / application deployments) and provider (implementation / shared 
service deployment) model. Shared services are typically installed as part of the 
Foundation Pattern. 



Figure 8-52 Shared services overview 

The deployed instances of a shared service are associated to a cloud group. Only one 
instance of a shared service type can be deployed in a cloud group. Application deployments 
in a cloud group use the instance of the service deployed to that cloud group. 


Permissions to deploy shared services: A user must be a cloud administrator or 
appliance administrator with full permissions to deploy shared services. A cloud 
administrator with read-only view permissions can view but not create, edit, or deploy 
shared services. A user with appliance administrator read-only view permissions cannot 
view the shared services. 


8.3.1 Caching Service V2.0 

The IBM Workload Deployer hosted caching service is a shared service that is deployed in 
the cloud to allow other deployments from Workload Deployer to use common cached 
information. It enables in-memory cached objects in virtual applications. 
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Virtual applications share the cache service in the cloud group to which they are deployed. 
Sharing the cache service function reduces the footprint of resources that are required for 
each virtual application, because they do not have to maintain their own memory to support 
the cache. Caching service also eliminates redundant virtual machines to support high 
availability. 

The caching service is not just for session replication. A virtual system can use the caching 
service for sessions, as a dynamic cache, or as a simple object grid. The caching service is 
based on WebSphere extreme Scale code and provides highly efficient caching. The caching 
service is self-managed and highly available, providing simple and quick usage. 

To deploy a caching service that is hosted as a shared service, complete the following steps: 

1 . Click Cloud -> Shared Services and click the Caching Service 2.0 entry (Figure 8-53). 

2. Click the Deploy icon. 



IBM workload Deployer 



JL, Administrator 

1 C: 1 Help 1 

| About ] Logout 


Welcome Instances 

Patterns 

Catalog 

Reports 

Cloud 

System 



Shared Services 

Name 

Caching Service 


Caching Servic; 


h- 


Caching Service (External) 

Monitoring - Application 

Monitoring - Application 
(External) 

ELB Proxy Service 

ELB Proxy Service 


U- 


2.0 


2.0 


1.0 


Caching Service 
Application ID: 

Description: 

Created by: 

Last Modified by: 

Created on: 

Last Modified on: 
Supported Clients Version: 


Deploy 


a-28c7c50d-90f6-4S2d- 

b3B4-e5e62a7009d4 

The Caching Service provides a self 
managed and highly available common 
service for caching information 

cbadmin 

cbadmin 

Nov 19, 2011 12:13:01 AM 
Nov 19, 2011 12:13:01AM 
[ 0 . 0 , 2 . 0 ] 




Figure 8-53 Caching Service V2.0 
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3. Specify the instance size, number of instances, maximum number of instances, and, if 
automatic scaling is enabled, the rules for auto-scaling (Figure 8-54). These settings 
determine the size and initial number of virtual machines in the cloud that are devoted to 
the caching service. 


Configure and deploy a shared service 
T sharedservice - Caching Service 


Cache size per instance: * 

Initial number of instances: ~ 

Maximum number of 
instances: * 

T Scaling Properties 



Enable Automatic Scaling 


Automatic scaling threshold \=\ 

range ( 'i-o ): Range: 20% - 80% 


100% 

^=[! 


Minimum time to trigger 
automatic scaling 
(seconds): * 


900 



( OK Cancel 


Figure 8-54 Caching service properties 


The initial number of instances provides the minimum number of instances that share in 
session persistence and provide failover. For example, if you select an 8 GB size per 
instance and four initial instances, the caching service deploys with four virtual machines 
that can each handle 8 GB of caching information, for a total capacity of 32 GB. The 
information about each instance is replicated automatically to other caching 
virtual machines. 


Cache grid total: The estimated cache grid provides a total of 32 GB in this example, 
but the total virtual machine instance size is larger than 32 GB because of the 
administrative and OS memory requirement additions. 


When you select Enable Automatic Scaling, you must specify the following settings: 

- Automatic scaling threshold range percentage 

Defines the automatic scaling range, using the slide rule, when the capacity is outside 
the limits. The lower capacity limit is for scale down and upper capacity limit is for 
scale up. 

- Minimum time to trigger automatic scaling 

Specifies the minimum amount of time in seconds that the capacity must be outside 
the specified range to trigger automatic scaling. 
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If you select Disable Automatic Scaling (Figure 8-55), the scaling properties are removed 
form the deployment window and you must manually scale out and scale in the cache 
instances from the Virtual Application Console up to the maximum number of instances. 


Configure and deploy a shared service 


Service name: 

Caching Service 

T sharedservice 

- Caching Service 


Cache size per instance: “ 

Initial number of instances: * 

Maximum number of 
instances: * 

Scaling Properties 
Disable Automatic Scalingl 


OK ) Cancel 

Figure 8-55 Disabling automatic scaling in the caching service 



4. Complete the deployment by providing the cloud group information for the service and 
click OK. 

5. You can view the new shared caching service virtual machines by clicking Instances -» 
Shared Services and then selecting the shared service instance. You can monitor the 
deployment status in the Virtual machine perspective section. The Role Status is Caching 
when the instance is running. 

In Figure 8-56, you see that the virtual machines have different functions as indicated by the 
name (catalog, master catalog, and container). Cached data is stored in the containers. The 
catalog service maintains topology information for the containers and controls balancing and 
routing for all clients. The last virtual machine to reach a running state is the master. 


- Virtual machine perspective (4 in total) 


Name 

Public IP 

VM Status 

Started on 

Role 

Status 

Caching-Catalog. 

11321367380207 

172.16.39.234 

Running 

Loo 

u 

Nov 15, 2011 
9:30:07 AM 

Caching 

Q 

Caching-Catalog. 

21321367380208 

172.16.39.233 

Running 
* Log 

u 

Nov 15, 2011 
9:30:08 AM 

Caching 

Q 

Caching- 

Container. 

11321367380209 

172.16.39.232 

Running 

Log 

u 

Nov 15, 2011 
9:30:08 AM 

Caching 

u 

Caching-Master. 

11321367380206 

172.16.39.235 

Running 

Log 

Q 

Nov 15, 2011 
9:30:07 AM 

Caching 

Q 


Figure 8-56 Caching service virtual machines 
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Managing the service 

You can use the Virtual Application Console to manage the caching service. To open the 
console, click Manage from the shared service instance. If automatic scaling is disabled, use 
the scale out and scale in operations to increase and decrease the amount of cache 
instances in the cloud. You cannot have automatic scaling enabled and also manually scale 
out and scale in because these operations conflict with the automatic scaling rules. 

You can also use the Virtual Application Console to manage grid caching directly. If you are 
using a virtual application pattern with a scaling policy and shared services, the grid is 
managed and configured for your WebSphere Application Server automatically. 

If you are not using a virtual application pattern (that is, you are deploying a WebSphere 
Application Server virtual system) and want to customize that installation for caching 
manually or if you have an application that has direct WebSphere extreme Scale appliance 
grid operations, you can manage the grid in the cloud yourself from the 
Virtual Application Console (Figure 8-57). 


+J List grids 
#J List grid details 
R Create grid 

Description: Create a new caching grid. 

Grid name: ~ 

Grid type: * 

User name: * 

User password: * 

Confirm password: * 

Submit 

+J Delete grid 

Figure 8-57 Virtual Application Console grid operations 


Simple Data Grid 


Grid caching maintains data that can be accessed from multiple clients, minimizing network 
latency and reducing bandwidth. You can set the following options when you are using the 
caching service to configure grid caching: 

► Create grid: Creates a grid to maintain cached data. When creating a grid, you need to 
provide a name, specify the type of grid, and assign the grid an ID and password. 

► List grid: Returns a list of all of the grids that currently exist in the caching service. 

► List grid details: Returns the details of a specific grid. 

► Delete grid: Deletes the specified grid. If you choose to delete a grid, all of the cached data 
on that grid is deleted. This action cannot be undone. Deleting a grid also deletes the user 
ID that is associated to the grid. 
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8.3.2 Caching Service (External) V2.0 


You can also connect to an external caching appliance collective with by clicking Cloud -» 
Shared Services Caching Service (External) 2.0. Clicking Deploy displays the required 
parameters for the external cache (Figure 8-58). 


Configure and deploy a shared service 


Service name: Caching Service 

T sharedservice - External Caching Service 

External Caching Appliance 
Host Name: * 

External Caching Appliance 
Administrative User Name: * 
External Caching Appliance 
Administrative User 










Password: 35 


External Caching Appliance 
Public Certificate: * 






OK ] Cancel 

Figure 8-58 Configuring an external caching service 

Here, you can point at an external WebSphere DataPower XC10 appliance. The following 
parameters are required: 

► External Caching Appliance Host Name 

► External Caching Appliance Administrative User Name 

► External Caching Appliance Administrative User Password 

► External Caching Appliance Public Certificate 

You can obtain the External Caching Appliance Public Certificate by using a browser to 
access the XC10 appliance and then download the public certificate. 

When you deploy an application with a scaling policy configured to a cloud with an external 
caching service, the application caches according to the configured external service settings. 


8.3.3 ELB proxy service 

The primary benefit of enabling a proxy service is that the IP addresses used internally are 
not visible externally on the web. A typical environment has a first-tier, known host (such as 
www. i bm.com) that sprays requests to a second tier of internal servers that host the application 
and content (protected and secured). The IBM Workload Deployer ELB proxy service is on 
the second tier. The multiple ELB instances set up by the service are the internal IP 
addresses that the first tier sprays with requests. 
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The ELB proxy service provides a front end to virtual applications in the cloud by balancing 
the load across the instances of virtual applications. The ELB shared service is shared by 
virtual applications that are deployed to the same cloud group, removing the redundant 
component from each virtual application that is shared to improve cloud density. Requests 
are routed to an application based on the protocol (HTTP and HTTPS) and the application’s 
host name. 

To enable the ELB proxy service, complete the following steps: 

1 . Click Cloud — > Shared Services, select ELB Proxy Service 2.0, and then click the 
Deploy icon. 

2. Configure the number of initial instances (Figure 8-59). The initial number of ELB 
instances value is how many ELB instances should be created initially. This number 
indicates the number of virtual machines that share in the responsibility of load balancing 
and provide failover. The default value is 2. 


Configure and deploy a shared service 


Service name: ELB Proxy Service 

T sharedservice - ELB Proxy Service 


Initial Number Of ELB 
Instances: * 


OK Cancel 


Figure 8-59 Configuring the ELB proxy service 

3. Click Instances -> Shared Services and select the service to monitor the deployment. 
The Deploy Virtual Application window displays the target environment profile or target 
group (Figure 8-60). Wait for your ELB service to reach the Running state. 


- Virtual machine perspective (3 in total) 





Name 

Public IP 

VM Status 

Started on 

Role Status 


Services- 

elblnstance. 

11321383907620 

172.16.39.237 

Running 
Id Log 

Nov 15, 2011 
2:05:30 PM 

ELB In stance 

□ 

Services- 

elblnstance. 

21321383907621 

172.16.39.236 

Running 

Id ■* Log 

Nov 15, 2011 
2:05:30 PM 

ELB In stance 

5 

Services- 

elbManagement. 

11321383907619 

172.16.39.238 

Running 
Id Log 

Nov 15, 2011 
2:05:30 PM 

ELBManagement 

U 


Figure 8-60 ELB service virtual machines 

The ELB instance virtual machines are the actual load balancer virtual machines. The ELB 
manager is the virtual machine for all ELB-related operations and management. 
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After the ELB proxy service is deployed, click Manage from the instance to open the Virtual 
Application Console (Figure 8-61). 



Figure 8-61 Management operations options 

For the ELB instances, you can export the server certificate or root signer certificate 
(Figure 8-62). 


H Export certificate 

Description: Extract and download server SSL certificate or root signer SSL certificate 

Certificate: * 

server certificate 



server certificate \ 

root signer certificate 

Submit 




Figure 8-62 Performing operations on the ELB service 


In the ELB management virtual machine, you can scale in or scale out the number of ELB 
instances you provisioned for the shared service (Figure 8-63). 


0 Scale Out 

Description: Provision one more ELB instance 
Submit 

hj Scale In 

Description: De-provision one of the ELB instances 
Submit 

Figure 8-63 Manually scaling the ELB instances 

8.3.4 Monitoring 

You can deploy the monitoring shared service for applications to provide a reference to an 
external Tivoli Monitoring installation running at Version 6.2.2 Fix Pack 5 or later. For the 
most up-to-date list of requirements, go to the following address: 

http : //www. i bm.com/software/webservers/workl oad-depl oyer/1 i brary/ 
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To deploy a monitoring application service, complete the following steps: 

1 . Click Cloud -» Shared Services and select the Monitoring - Application (External) 1 .0 

entry. 

2. Click Deploy. 

3. Configure the connection parameters for the external Tivoli Monitoring Server 

(Figure 8-64). When created, the UNIX or Linux OS monitoring agents and the workload 
monitoring agent that is provided in the virtual application workloads are connected 
automatically to the defined instance of a Tivoli server using the supplied primary and 
failover Tivoli Enterprise Management server, protocol, and port. 


Configure and deploy a shared 

service 

Service name: 

Monitoring - Application 

T sharedservice - External Tivoli Enterprise Monitoring Server - default 

Primary Server: * 

Secondary Server: 



©IP.PIPE 

Protocol: * 

IP.SPIPE 


IP.UDP 

Port: * 

1913 

Console URL: 



OK ) I Cancel 

Figure 8-64 Configuring the Monitoring service 

You can provide the URL for the Tivoli Enterprise Portal Webstart console, so that cloud 
administrators are presented with a monitoring link in the Workload and Deployment 
consoles to start to the IBM Tivoli Enterprise Console®. 

You must install the latest Application Support and Language Pack files for the workload 
monitoring agent on the Tivoli Enterprise Management server and Tivoli Enterprise Portal 
Server before creating the shared service and deploying patterns for Tivoli Monitoring to 
understand and display the new agents. 


8.4 Virtual application deployment 

Virtual application deployment creates a running virtual application instance in a cloud 
infrastructure. After you create virtual application patterns and verify that you have the 
necessary resources (such as available Internet protocol addresses, cloud resources, and 
hypervisor resources), you can deploy an application to the cloud. 

The time it takes to deploy a virtual application depends on several factors. These factors 
inlcude the size of the virtual application pattern parts and the inter-dependencies of parts in 
the application definition, network usage, storage usage, and the provisioning speed of the 
virtual machine on the cloud infrastructure. Deployment time also depends on any policies 
that are applied to the virtual application pattern. 
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To deploy a virtual application, click Pattern Virtual Application Patterns. The menu bar 
on the upper right side of the window contains the Deploy icon that is used for initiating 
application deployment (Figure 8-65). 


& Deploy # Open ^ Export X Delete |Fp Clone 
Figure 8-65 Virtual Application Patterns menu buttons 

The following example deploys one of the sample applications that is included in the IBM 
Workload Deployer pattern types. Select the Sample Java EE web application and click 
Deploy. The Deploy Virtual Application window opens. Use the scroll bar to view the 
Advanced option (Figure 8-66). 


Deploy Virtual Application 


Select target environment profile: 


a 

Filter by IP type: 

IPv4 IPv6 



Filter by profile type: 

AH H 






Profile: 







Cloud group: 







IP group: 




Select target cloud group: 




IP Version: 

(& IPv4 IPv6 



Cloud group: 

Default ESX group 



Advanced 



V 


( OK Cancel 

Figure 8-66 Virtual Application deployment window 

The deployment code searches for valid environment profiles and cloud groups that are 
defined on the appliance and filters them based on Internet protocol type (for example, IPv4 
and IPv6), profile type, and profile name. 

If you select the Select target environment profile option, the deployment code filters on IP 
type, profile type, profile name, cloud group, and IP group. If you select the Select target 
cloud group option, it filters the IP type and cloud group. 

If the “Select target environment profile” option is disabled, no environment profiles 
are defined. 
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The Advanced option allows you to add Secure Shell (SSH) key-based access to the 
deployed workload virtual machine. If you do not want to enable SSH key-based access on 
the deployed VM, click OK. Otherwise, complete these steps to add SSH key-based access. 


Tip: SSH access can be an important diagnostic aid. 


1 . Select the Advanced check box to add the SSH protocol key in the Deploy Virtual 
Application window (Figure 8-67). 


|Bl Advanced 

SSH Key: 

2 UQlWnT QQCKZ k:ZU4b YYgKQS iMzTKH Q2 VS +p f A 
CNFI Z e 3 GMuo QjKIH JDkrobE 4 d j L 6h A d2 JkLAO 4 
vxEx SKp 05 JP 6B FGYAf B WWyx qS c qf + Op IKUDH 
yuZ sNx dqu D JT 3x1 o LVW dME t a 4U4 c 1 7 gnKw/ q 

r B 9 C 3 IM9xvkAe kNUiil Fb ST f 6 1 3 6ul YBWwe gM 
Z j E PyMSRwy 0 kGb 2 gLGY r SCV5T S lgTqONUe S J 

3 6 sp 5 Gs Oh4hhyMc j ZM t G JTXB FQVYgGQa YgZh 
f H3 9 7hQkW7 + ZxYw+b 

/ Iuy VuGlT wtT vV2 7 CL D5 QLwX4 qua 5/7 
auto generated k:ey| 


Generate 





Figure 8-67 Adding the public SSH key 


2. Enter your SSH public key in the SSH Key field. You can use a text editor to open your 
public key file, select all of the text, and then copy and paste the key into the SSH Key 
field. The key string must be in the public key format used in the OpenSSH 
authorized_keys file. 


Important: Do not copy the key from the console output of the Linux more command. 
Doing so can introduce line breaks into the key that might render it invalid. 


If you do not want to use an existing SSH public key, you can generate one by completing 

the following steps: 

a. Click Generate to generate the SSH key. The SSH public key is populated 
automatically in the SSH Key field. 

b. Select Click here to download the file that contains the corresponding private key. 

c. Save the private key file. Save the file to a secure location. The default file name is 
i d_rsa, or on Windows systems it might be i d_rsa.txt. You can rename the file to 
something you will not forget for this deployment. 


Important: The system does not keep a copy of the private key. If you do not 
download the private key, you cannot gain access to the virtual machine unless you 
configure a new public key through the Virtual Application Console (see 13.5.6, 
“Adding, updating, or removing a virtual machine SSH public key” on page 321). 

The generated key pair can be reused for subsequent deployments, which means 
that your SSH client does not have to be reconfigured with a new private key each 
time. Copy and save the generated public key from the SSH Key field, and paste it 
into the same field the next time you deploy a virtual application. 


3. Click OK to continue to deploy your virtual application. 
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A message displays at the top of the Virtual Application Builder confirming that the virtual 
application is in the deployment process (Figure 8-68). Use the hyperlink in the message to 
check the status of the deployment. The linked page can also be reached by clicking 

Instances Virtual Applications. 


Sample Java EE web application ^ Deploy y? Open [ 

(?) Deploying the virtual application 'Sample Java EE web application'. You can check the status bv clicking here 
Figure 8-68 Application deployment status message 


8.4.1 The deployment process 

When a user initiates the deployment process, the IBM Workload Deployer kernel services 
are started to convert the virtual application’s model (its logical description) into a topology 
document (a physical description). The topology is based on the components, links, and 
policies in the virtual application, and the cloud group that is specified during deployment 
provides platform information. 

IBM Workload Deployer selects a workload image based upon a best fit of the topology. Part 
of this resolution includes choosing the best or supported OS, machine size (processor, 
memory, and disk), and architecture (32-bit versus 64-bit). The resolved topology is then 
passed to a provisioning phase, in which resources are provisioned from shared services (for 
example, to request a grid from the shared caching service). The required cloud resources 
are then started to start the virtual machines. 

Each workload image contains a startup script that is started after the virtual machine starts. 
That script is the hook point for workload behaviors on a virtual machine, such as installing a 
product, configuring the product, waiting for role dependencies to be configured and running, 
and verifying the status of each role in the application. The deployment process shows the 
application in various stages, such as Launching, Installing, Configuring, Starting, and 
Running. The striped progress bar shown in Figure 8-69 indicates that actions are being 
performed and are not yet complete. 


Sample Java EE web application fZ 1 Q 

Figure 8-69 Application deployment progress 

Expanding the virtual machine perspective on the deploying application’s detail window 
shows that two statuses are being tracked. The virtual machine status is the status of the 
workload OS (Linux or AIX) and the role status is tracking the installation, configuration, and 
state of the product that is being deployed on the virtual machine (WebSphere Application 
Server, DB2, or Tivoli Directory Server). 
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The virtual machine status starts first because you need a virtual machine with a working 
operating system before you can install and configure products. The virtual machine status 
reaches the Running state before the role status shows any information. After the virtual 
machine status reaches the Running state, the role status displays configuration status 
(Figure 8-70). 


- Virtual machine perspective (2 in total) 





Name 

Public IP 

VM Status 

Started on 

Role 

Status 

application-was. 

11321049791490 

172.16.39.223 

Running 

Log 


Nov 11, 2011 
5:16:45 PM 

WAS 

n 

database-db2. 

11321049791491 

172.16.39.227 

Running 

Log 

IS 

Nov 11, 2011 
5:16:46 PM 

DB2 

“■x 


Figure 8-70 Application virtual machine perspective during startup 


Table 8-1 lists the possible status values for virtual machines. 


Table 8- 1 Status values for virtual machines 


Status 

Icon 

Virtual machine description 

Launching 

a 

The virtual machine is being 
provisioned on the 
infrastructure cloud. 

Failed 

O 

The virtual machine did not start 
successfully. 

Registering 

+* 

Registering virtual system. 

Starting 

— 

Starting virtual machines in 



virtual system. 

Transferring 

£ 

Transferring virtual images to 
hypervisors. 

Running 

B 

Running and the health status 
is normal. 

Terminating 

m 

The virtual machine is stopping. 

Terminated 

□ 

The virtual machine is stopped. 

Unknown 

LS 

Running and the health status 
is unknown. 

Critical 

L 3 

Running and the health status 
is critical (processor usage > 
80%). 

Warning 

Li 

Running and the health status 
is warning (processor usage > 
60%). 
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Table 8-2 lists the status values for roles. 


Table 8-2 Status Values for roles 


Status 

Icon 

Role description 

Initial 

n 

The role is being provisioned on 
the infrastructure cloud. 

Installing 

+x 

The role is installing. 

Configuring 

mi 

The role is configuring. 

Error 

© 

The role did not start 
successfully. 

Starting 

k 

The role is starting. 

Running 

u 

Running and the health status 
is normal. 

Terminating 

d 

The role is stopping. 

Terminated 

□ 

The role is stopped. 

Unknown 

li 

Running and the health status 
is unknown. 

Critical 

Li 

Running and the health status 
is critical. 

Warning 

Q 

Running and the health status 
is warning. 


The History section contains status messages that pertain to the deployment process 
(“Deployment has been queued”, “Reserving cloud resources”, and so on). When the 
following message appears, the virtual machine status for the hosting OS is ready to initiate 
the role configuration: 

“The virtual system has been deployed and is ready to use.” 

The role refers to the software that is installed and configured on the virtual machine (for 
example, WebSphere Application Server, DB2, or Tivoli Directory Server), including 
configuring any JDBC connections or JCA connectors between the roles or to any external 
data sources. 

When all virtual machine status and role status indicators reach the Running state, the virtual 
application instance is ready to be used (Figure 8-71). 


- Virtual machine perspective (2 in total) 


Name 

Public IP 

VM Status 

Started on 

Role Status 

application-was. 

11321282329515 

172.16.39.228 

Running 

Log 

□ 

Nov 14, 2011 
9:52:22 AM 

was y 

Endooint 

database-db2. 

11321282329516 

172.16.39.227 

Running 

Log 

S 

Nov 14, 2011 
9:52:22 AM 

DB2 Q 
Endooint 


Figure 8-71 Application virtual machine perspective in a running state 
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The Log link opens a browser tab to the Log Viewer of the deployed virtual machine 
(Figure 8-72). Logs are useful when verifying installation or debugging application issues. For 
more information about the Log Viewer, see 13.4, “Viewing the virtual machine logs” on 
page 309. 


LOQ Viewer [ application-was. 11321282329515 (172. 16 . 39. 228 )] 

% Refresh Q) Download All 

Name: 



W GO 

® Q application-was. 1132 12823295 15 

- 3 OS 

+ E /var/log 
+ lj ... /log/m ustGather 

- g WAS 

+ □ .../logs/serverl 

+ B .../logs/ffdc 

§ IWD Agent 

+ a ■■■/application-was. 11321282329515/logs 

+ S .../logs/install 

+ □ .../logs/application-was. 1132 12823295 15.AGENT 
+ E ... /logs/application-was. 11321282329515. SSH 
+ □ .../logs/application-was. 1132 12823295 15. MONITORING 
+ □ .../logs/application-was. 11321282329515. WAS 
+ E /Oconfig 


Figure 8-72 Application virtual machine Log Viewer 


The Endpoint link provides information to view the endpoint for a role. For a deployment with 
DB2, you can have more than one endpoint, for example, one endpoint for the application 
developer and one endpoint for the database administrator (Figure 8-73). You can use this 
information if you want to connect to the deployed database. 


Endpoint information 

AppUser ENDPOINT: jdbc:db2://172.16.39.227:50000/mydb:user=appuser; 
password=RkQh5G3s480IGfP6Goph; 

AppDBA ENDPOINT: jdbc:db2://172.16.39.227:50QQQ/mydb:user=appdba; 
password =NavJ36qS9KOzthJh8; 


Figure 8-73 DB2 endpoint links 

For Java EE applications, the Endpoint link provides the host name, port, and context root 
that are defined in the virtual application. If the Java EE welcome file mechanism for the 
application is set up correctly, clicking the endpoint starts the application (Figure 8-74). 


Endpoint information 

ENDPOINT: http://172.16.39.228:9080/tradelite/ 

Figure 8-74 Application virtual machine endpoint link 
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For the Sample Java EE web application, the endpoint starts the Trade6 WebSphere 
Performance Benchmark Sample. The home page documents its design and usage. If you 
want to run the application, complete the following steps: 

1 . Click Configuration, and then click Reset Trade (before each run). 

2. Click Configuration, and then click (Re)-populate the Trade Database. 

3. Click Configuration, and then click Test Trade Scenario. 

4. Click the quotes button, exercise purchases, and explore the application. 

8.4.2 Applications instances and maintenance 

Now that the Sample Java EE web application is running, you can explore what you can do 
with respect to the action buttons on the virtual application instance menu. Click Instances 
Virtual Application Instances. Figure 8-75 shows the icons on this window. 


□ Stop X Delete Manage Upgrade Jjf Maintain Q Resume 

Figure 8-75 Application Instances menu buttons 

In Figure 8-75: 

► The Stop icon deletes the virtual application instance. 

Important: There is no recovery or start option if you click Stop. After selecting the 
Stop icon, if you want to run the virtual application again, you must start a 
new deployment. 

► The Delete icon removes stopped application instances from the Virtual Application 
Instances list. 

► The Manage icon opens the Virtual Application Console. For information about this 
console, see Chapter 13, “Managing virtual applications” on page 303. 

► The Upgrade icon upgrades the application pattern type. It is enabled if you have a 
pattern type installed that is higher than the pattern type in the current virtual application 
instance. The Upgrade icon is also enabled if new plug-ins are added to the pattern type 
(for example, third-party plug-ins). This upgrade type typically occurs between 
maintenance and fix versions, not versions or releases. The version notations are in the 
format version, release, maintenance, and fix (V.R.M.F). 

For example, you can upgrade an application from Web Application Pattern VI. 0.0.2 to 
Version 1 .0.0.3, but not from Version 1 .0.0.2 to Version 2. 0.0.0. If a fix pack becomes 
available that contains a Web Application Pattern VI .0.0.4, you can upgrade from Version 
1 .0.0.2 or Version 1 .0.0.3. to Version 1 .0.0.4. 
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► The Maintain icon puts the application in maintenance mode. After an application is in 
maintenance mode, you can stop and start the individual role virtual machines within the 
application without the recovery or scaling policies being activated. When an application is 
placed in maintenance mode, an additional Action column is added on the virtual machine 
perspective detail section to stop and start the virtual machine. Click View in the Action 
column, and then select the Stop or Start icons (Figure 8-76). 


- Virtual machine perspective (2 in total) 





Name 

Public IP 

VM Status 

Started on 

Role Status 

Action | 

application-was. 

11321626012455 

172.16.39.228 

Running 

m 

Nov 18, 
2011 

WAS U 

Vi p w 


>*■ Log 

9:20:27 AM 

-r Cl IU 

□ 

database-db2. 

11321626012456 

172.16.39.227 

Running 

Q 

Log 

Nov 18, 
2011 

9:20:27 AM 

DB2 Q 
Endooint 

View 


Figure 8-76 Stopping and starting an individual role virtual machine in maintenance mode 

► The Resume icon resumes an application after maintenance mode is finished. 

As an example, assume that you need to perform maintenance on the virtual machine that is 
running the application server. 

Continuing with the previous application example (which was left in the Running state), click 
the Maintain icon. A toolset icon is added to the application status icon (Figure 8-77). The 
Sample Java EE web application is now running in maintenance mode. 


Sample Java EE web m 

application “ 

Figure 8-77 Virtual application placed in maintenance mode 

Maintenance mode suspends the automatic recovery of the virtual machines and the scaling 
policy so that the machine can be stopped and started. When an application is in 
maintenance mode, an administrator can apply OS or middleware fixes to the virtual 
machine, and then stop and start the virtual machine (sometimes fixes require OS reboots), 
without IBM Workload Deployer attempting to start new virtual machines to replace it. 

You might also use maintenance mode when you are in an application testing environment 
and have many applications consuming resources. You can stop applications to free 
resources and allow other test applications to run. 

To start a virtual machine in stopped status, click the Resume icon, and the auto recovery 
and scaling policies become active and start the missing virtual machine. When this situation 
occurs, the virtual application reflects the status of an application being started 
and configured. 
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To extend the previous example, the Sample Java EE web application is now in maintenance 
mode. The administrator can use SSH to connect to the virtual machine and apply OS fixes or 
middleware patches. When the updates are complete, stop the application from the virtual 
machine perspective in the application’s details page. In the Action column, click View 
Stop (Figure 8-78). 


- Virtual machine perspective (2 in total) 
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Figure 8-78 Stopping a VM while in maintenance mode 

The virtual machine status for the application-was virtual machine changes to Stopping and 
then Stopped (Figure 8-79). 


- Virtual machine perspective (2 in total) 
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VM Status 

Started on 

Role Status 

Action 

application-was. 

11321282329515 

172.16.39.228 
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Nov 14, 2011 
9:52:22 AM 


View 

database-db2. 

11321282329516 

172.16.39.227 

Running y 

Log 

Nov 14, 2011 
9:52:22 AM 

db 2 y 

* Endpoint 

View 


Figure 8-79 A stopped VM in maintenance mode 

The status for the application changes to the Error state in maintenance mode, because the 
application is no longer ready to be used and one of its virtual machines is stopped 
(Figure 8-80). 


Sample Java EE web ** im 

application “ “ 

Figure 8-80 Virtual application maintenance mode indicator 

When the maintenance operations are completed, start the virtual machine by clicking 
View -» Start in the Action column. The application-was virtual machine goes from Starting to 
Running state, and the virtual application instance leaves the Error state after the virtual 
machines recover. The user can now safely click the Resume icon to take the application 
instance out of maintenance mode. 

If instead of starting the application-was virtual machine after the maintenance operations the 
user clicks the Resume icon, recovery rules are triggered (due to the stopped virtual 
machine) and a second application-was virtual machine starts, leaving the original virtual 
machine in the Stopped state. 
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8.4.3 IBM Workload Deployer recovery rules 

IBM Workload Deployer has default recovery rules to ensure the high availability and recovery 
of the virtual applications in case of failure. These rules apply in addition to any scaling 
policies that might be in force for the application instance. These rules are applied when 
virtual machines managed by the appliance are suddenly not available. 


Recovery in maintenance: Recovery rules do not apply when a virtual application 
instance is in maintenance mode. 


Persistent virtual machines are the deployed virtual machines that can contain stored 
information (or state) that must be used if a virtual machine recovery is attempted. These 
persistent virtual machines include the IBM DB2 and IBM Tivoli Directory Server role virtual 
machines and proxy and caching shared services. 

Persistent virtual machines use the following recovery rules: 

► If the application is placed in maintenance mode and if the role virtual machine is stopped 
from the Virtual Application Instances Action column, no action is taken. 

► If the role virtual machine is stopped outside of the IBM Workload Deployer user interface, 
for example, from VMware tools, try to restart the virtual machine one time. Make only one 
attempt to restart the virtual machine. 

Important: If you stop a virtual machine by clicking IBM Workload Deployer Cloud 
Hypervisors rather than clicking Patterns -» Virtual Application Instances, the 

recovery rules attempt a reboot. 

► If the virtual machine is terminated (such as Power Off and Remove from Inventory using 
VMware Tools), no action is taken. The application instance enters an Error state. 

A non-persistent virtual machine does not have recoverable state information. A WebSphere 
Application Server instance is a non-persistent virtual machine. The rules for non-persistent 
virtual machines depend on the type of scaling policy that is applied. The following recovery 
rules are used for non-persistent virtual machines: 

► No scaling policy or has a static scaling policy 

If a role virtual machine is stopped, a new instance is launched. For example, if you start 
with two virtual machines and you stop one of them, recovery creates a new virtual 
machine, and you now have three virtual machines (one stopped and two running). The 
stopped virtual machine is not deleted or replaced. 

If a stopped virtual machine is restarted, one of the two copies of the virtual machine is 
deleted at random. This removal ensures that the original number of virtual machines 
returns to the correct number of running virtual machines for the deployment. 

If the virtual machine is terminated (such as Power Off and Remove from Inventory using 
VMware Tools), a new virtual machine is launched to replace the terminated virtual 
machine. For example, if you start with two virtual machines and stop the application 
server virtual machine from VMware, IBM Workload Deployer detects that the virtual 
machine is gone and restarts a replacement virtual machine. 

► Elastic scaling policy 

If a role virtual machine is stopped, a new instance is launched only if the number of 
running instances is below the minimum value for the scaling policy. Otherwise, do 
nothing. In either case, the stopped virtual machine is not deleted or replaced. 
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If a stopped role virtual machine is restarted by the user, one of the virtual machine copies 
is deleted at random if the number of running instances is above the maximum value for 
the scaling policy. Otherwise, no action is taken. 

If the virtual machine is terminated (such as Power Off and Remove from Inventory using 
VMware Tools), the same rule applies for the static scaling policy. A new virtual machine 
is launched to replace the terminated virtual machine. 
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Virtual application pattern 
example: Web services 


This chapter provides an example to demonstrate how to configure an application containing 
web services and some of the web service capabilities available in IBM Workload Deployer. 

IBM Workload Deployer uses the capabilities in WebSphere Application Server to host web 
services or connect to existing web services. When you deploy an application (EAR, WAR, or 
OSGi), the application is installed on an instance of a WebSphere Application Server. The 
Web Application Pattern type’s web service plug-in supports connecting the application to an 
external web service, attaching web server policy sets, assigning bindings, and creating links 
between a web service client and provider. 

In the first part of this sample, we use the cloud to host a simple Jax-WS web service 
provider. The example includes configuring a web service client, a provider, a policy set, and 
a binding. In the second part, we use the Existing Web Service Provider Endpoint capability 
to connect to an existing web service provider from a web service client. 

This chapter contains the following topics: 

► Scenario overview 

► Configuring a web service client and a new web service 

► Configuring an Existing Web Service Provider Endpoint 
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9.1 Scenario overview 


This scenario shows a web service provider application and a client application that starts the 
service on its endpoint. We first show the application setup, and then how to use an existing 
web service as a resource. 

This sample demonstrates how to configure an application that contains a web service client 
and provider using the Virtual Application Builder. The application contains Jax-WS service 
annotations that are used in IBM Workload Deployerto identify link requirements needed to 
run the application successfully. 

The usage of Jax-WS web service policy sets and bindings is also demonstrated in the 
example. IBM Workload Deployer can use policy sets and bindings that are configured and 
exported from a WebSphere Application Server server. 


9.2 Scenario prerequisites 

To run this sample scenario: 

► IBM Workload Deployer must be configured with a cloud group, hypervisor, and IP group. 

► The Web Application Pattern Type V2.0 license must be accepted and it must be enabled. 

► The following assets are assumed to be available on the web browser system: 

- JaxWSServicesSample.ear 

- wssampl esei .war 

- JaxWSService_policy.zip 

- JaxWSService_binding.zip 

► You must have “Create new patterns” authority in IBM Workload Deployer. 


9.3 Configuring a web service client and a new web service 

In this part of the web service sample, you build a virtual application consisting of a web 
service client and web service provider. You deploy and then access the virtual application. 


9.3.1 Configuring the application 


You must be logged on to the IBM Workload Deployer user interface as a user with at least 
the “Create new patterns” permission to perform this sample. We start the scenario by 
configuring the service provider and client using the Virtual Application Builder: 


1 . Open the Virtual Application Builder: 
a. From the main menu, click Patterns ■ 


Virtual Applications. 


b. Click New ( O ). Select Web Application Pattern Type 2.0 in the Pattern Type 
drop-down menu. 
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c. Select Blank application and click Start Building (Figure 9-1). 


Create Application 


x 


Start building your virtual application. 


Choose one template of selected pattern type to start building your virtual application. 


Pattern type 

Web Application Pattern Type 2.0 


Description: 

Blank application 


® More information 


Blank application 

Blank Java EE web application 


Preview: 


Start Building Cancel 


Figure 9- 1 Start building the virtual application 
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2. Build the application using the Application Components section. 

a. Drag an Enterprise Application and a Web Application component to the Virtual 
Application Builder canvas (Figure 9-2). 



Figure 9-2 Virtual Application Builder 

In this scenario, the web application component represents a .war file that is the web 
service client. The enterprise application component represents an .ear file that is a new 
web service that is deployed with the virtual application. 

3. Configure the wssampl esei .war web service client application. 

a. Click the Web Application component in the canvas. This action adds the required 
properties to the component in the right pane (Figure 9-3). 


ri 


Web Application 

WebSphere App I icsticn Se 


Name: 


Web Application 


WAR File: * 

| a rtifa cts/ws s a m p I e s ei . Browse D e I ete 
Context Root: 


Interim fixes URL: 

Click select button to update 


Select ▼ 


Figure 9-3 Web application settings 
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b. Click the Browse button next to the WAR File field and select the wssamplesei .war file. 
The WAR file is scanned after it is uploaded for resource annotations or references it 
might contain. 

c. Leave the Context Root field empty. The Context Root field allows you to provide a 
context root for the web application. If left blank, the field defaults to the file name 
preceding the .war extension. In this case, wssamplesei is used. 

d. Leave the Interim fixes URL field blank because we do not have any WebSphere 
Application Server fixes to apply. 

4. Configure the JaxWSServi cesSampl es . ear web service provider enterprise application. 

a. Click the Enterprise Application component in the canvas. 

b. Click the Browse button next to the EAR File window and select the 
JaxWSServi cesSampl es . ear file. The EAR file is scanned after it is uploaded for any 
annotation or resource references it might contain (Figure 9-4). 


Enterprise Application 

WebSphere Application Se 




Name:* 


Enterprise Application 

EAR File: * 

Browse Delete 

Tola 1 tra n s a ction 1 if eti me li m eout ( sec ): 

120 

Asy n c res pon s e ti rneout { sec ) : 

120 

Client inactivity timeout (sec): 

60 

Maximum transaction timeout (sec): 

300 

Interim fixes URL: 

Click select button to update 

Select ▼ 


Figure 9-4 Enterprise application settings 


The properties below the EAR File field configure the WebSphere Application Server 
instance in which the EAR file is deployed. Hover your cursor over each label to get a 
more detailed description of the label. 

- Total transaction lifetime timeout (sec) 

The default maximum time, in seconds, allowed for a transaction that is started on this 
server before the transaction service initiates timeout completion. Any transaction that 
does not begin completion processing before this timeout occurs is rolled back. 

- Async response timeout (sec) 

Specifies the amount of time, in seconds, that the server waits for responses to WS-AT 
protocol messages. 
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- Client inactivity timeout (sec) 

Specifies the maximum duration, in seconds, between transactional requests from a 
remote client. Any period of client inactivity that exceeds this timeout results in the 
transaction being rolled back in this application server. 

- Maximum transaction timeout (sec) 

Specifies, in seconds, the upper limit of the transaction timeout for transactions that run 
in this server. This value should be greater than or equal to the value specified for the 
total transaction timeout. 

- Interim fixes URL: 

Specifies the location or URL of selected interim fixes. This URL is used by the 
WebSphere Application Server virtual machine to download interim fixes for update. 

5. Create the web service link between the client and the provider application. 

a. Hover your mouse pointer over the right side of the Web Application component until 
you see the link connector dot (Figure 9-5). 


$ ‘S' Ta X 

Web Application 

$ 

Web Application 
Figure 9-5 Link connector dot 

b. Drag from the connector dot to the Enterprise Application component to create the link. 
The components provide warnings of possible missing configuration information. In 
this case, the link between the client and provider web service is missing the “Service 
name” property. Hovering your cursor over the warning symbols provides more 
information (Figure 9-6). 


h 


q Web Application 

A 

^ Enterprise Application 

A 


Enterprise Application 


Web Application 


Figure 9-6 The web service client is linked to the web service 


6. Configure the web service link. 

a. Click the link between the client and provider components to display the missing 
properties for the connection. The WAR and EAR files contain web service annotations 
that identify them as a web service client and a provider. As such, they require the 
information in the link in the web service name. 
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b. Enter PingService in the Service Name field (Figure 9-7). This setting specifies the 
operation that the client starts on the provider on this link. If there were multiple client 
operations, you create more links. 




Web Application — ► Enterprise 

^ Add policy for application 


Application 



Web Application — ► Enterprise 



Application 

0 Web Application 

- — ► Enterprise Application 

Service Name: * 


PingService 



Web Application 

Enterprise Application 



Figure 9-7 Service link properties 


Service: The service name is found in the WSDL file for the service: 

<wsdl : service name= ,, PingService"> 

<wsdl :port bi ndi ng="tns : Pi ngSOAP" name= l, PingServicePort ll > 
<soap:address 

1 ocation= 11 http ://10. 102. 163. 96: 9080/WSSampl eSei /PingService" /> 
</wsdl :port> 

</wsdl :service> 


9.3.2 Attaching policy sets 

Policy sets can be used to simplify your web service configuration by grouping security and 
other service settings into reusable components. Paired with bindings that contain application 
and platform-specific information, policy sets simplify specification of quality of services for a 
web service. 

IBM Workload Deployer allows the usage of policy sets and bindings through the usage of the 
Policy Set component. An application’s policy set and bindings can be exported from 
WebSphere Application Server after they are configured and tested, and then used in IBM 
Workload Deployer. 
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To attach policy sets, complete the following steps: 

1 . Configure a policy set and binding for the web service client. 

a. Drag a Policy Set component onto the Virtual Application Builder canvas (Figure 9-8). 



Figure 9-8 Add a policy set 

b. Hover your cursor over the right side of the Web Application component to find the 
connector dot, then drag it to the Policy Set component to create the Policy Set link 
(Figure 9-9). 


■tt" Add policy for application 

f fitVx'l 

; q Web Application ^ Enterprise Application 

L j 

Web Application Enterprise Application 

^ Policy Set 

b a 

Policy Set 

Figure 9-9 Create a link to the policy set 
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c. Select the Policy Set component to display its properties, and click the Browse button 
to select the JaxWSService_pol icy. zip file (Figure 9-10). 



Name: * 
Policy Set 


Policy Set File: * 

a rtifa cts/J ax V SSe nice. B rows e Del ete 
Figure 9-10 Select the policy set file 

d. Click the Policy Set link to display its properties, and enter PingService as the 
Service Name. 

e. Click the Browse button next to the Binding File field to select the 

JaxWSServi ce_bi ndi ng . zi p file. Because this policy set and binding is associated to 
the service client, leave the Provider policy set binding check box clear 
(Figure 9-11). 


>0 Web Application — ► Policy Set 


Web Application — ► Policy Set 

Provider policy set binding: 

Service Name: * 

PingService 
Binding File: * 

| a rtifa cts/J axWSS e rvi ce _ | Browse | [ Delete] 
Key Store: 

Browse 

Trust Store( Encryption): 

Browse 

Trust Store( Digital Signature): 

Browse 


Figure 9-11 Policy set configuration 
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2. Save the virtual application pattern. 

a. Click the Save button and enter JaxWSService in the Name field and an optional 
Description. Click OK (Figure 9-12). 



Figure 9-12 Save the application 
b. Close the Virtual Application Builder browser tab. 

9.3.3 Deploying the JaxWSService application 

The next step is to deploy the virtual application to the cloud. 

Complete the following steps: 

1 . Prepare for deployment. 

a. Back on the Virtual Application Patterns page (click Patterns Virtual Application 
Patterns), verify that the JaxWSService application is selected and then click the 
Deploy button (Figure 9-13). 


JaxWSService ||$> Deploy i| Open Export X Delete [I]D Clone 
Application ID: a-ela6503f-e57e-4a96-91b4-eccb784f365d 

Description: Blank application 


Figure 9-13 Deploy the virtual application 

b. The Deploy Virtual Application window opens. Select the appropriate values for your 
target cloud group or environment profile. In this example, the virtual application is 
deployed to the Default ESX group. 

Selecting the Advanced check box allows you to either generate a public and private 
RSA key pair or provide a public key (of an existing public and private key pair) to be 
able to access the deployed VM through SSH. This option is not used in this scenario. 
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After providing all the appropriate values, click OK (Figure 9-14). 


Deploy Virtual Application 
Name: 


JaxWSService 


All 


Select target environment profile: 
Filter by IP type: 

Filter by profile type: 

Profile: 

Cloud group: 

IP group: 

Select target cloud group: 

IP Version: 

Cloud group: 

Advanced 


IPv4 


IPv6 


IPv4 


IPv6 


Default ESX group 


OK 


Cancel 


Figure 9-14 Select the deployment options 


2. After deploying, you get a status message indicating that you can click the link to access 
the deployment instance (Figure 9-15). The same window can be reached by clicking 
Instances Virtual Applications and selecting your application. 


JaxWSService Deploy 

(T) Deploying the virtual application 'JaxWSService 1 . You can check the status by clicking here 
Figure 9-15 Message indicating that the deployment is taking place 

Click the link to monitor the deployment progress. 
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3. In the Virtual Application Instance window, expand the Virtual Machine section. The VM 
Status and Role Status fields for each virtual machine changes to indicate the deployment 
state of the virtual machines and the state of the application configuration and startup. 
Wait until the application reaches the Running state indicated by the green arrow icons 
under both VM and Role status (Figure 9-16). 


- Middleware perspective (2 in total) 

► WAS (We b_Ap plication -was) g Endpoint 

► WAS (Enterprise_Application-was) jj # Endpoint 

- Virtual machine perspective (2 in total) 

Name Public IP VM Status 

Enterprise_ 

Application-was. 172.16.39.233 Running Q ■+ Loo 

11320083788199 


W e b_Ap p mcati on-was. 
11320083788200 


172.16.39.232 Running Q * Loo 


Started on 


Oct 31, 2011 1:56:44 PM 


Oct 31, 2011 1:56:44 PM 


Role Status 

WAS Q * Endpoint 
WAS Q Endpoint 


Figure 9-16 Deployment status for the virtual application 


Running status variations: The Running icons might have indicators in the upper 
right that indicate different status of Running. The additional information might 
indicate “Running and health status is unknown”, “Running and health status is 
warning”, or “Running and health status is critical”. These additional states are 
normal before the component finally achieves the Running state. 


4. Click the Endpoint link to the right of the enterprise application to find the IP address and 
port number used for the enterprise application. Write down the public IP address of the 
enterprise application (in the example, 172. 16.39.233) and the port number (in the 
example, 9080) to use later in 9.4, “Configuring an Existing Web Service Provider 
Endpoint” on page 243. 


9.3.4 Using the application 

The last step is to access the deployed virtual application to ensure that it is working properly. 
Complete the following steps: 

1 . In the example, the EAR file provides the service provider and the WAR file contains the 
service client. After the application is running, click the Web_Application client’s Endpoint 
link. The endpoint provides the URL and context root used to access the client application. 

This example requires an additional path to run the application, so add /demo to the 
browser URL after clicking it (Figure 9-17). 


J IBM Workload Deployer 


JAX-WS Web Services Ping and Echo Sa... 


4" Q 172. 16.39. 232 : 9080/wssamplesei/demo 


Figure 9-17 Access the web service client from a browser 
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2. The application web page opens. There is a simple web service that issues a request with 
the exact text entered as input. Entering the text and clicking Send Message should 
produce the results shown in Figure 9-18. 


Message Options 


Message Type: 

One-Way Ping 



Message String: 
Message Count: 
SOAP: 

Test the 1-way Ping service 

i 

□ Use SOAP 1.2 

Send Message 



Connecting to . . . http : //localhost : 9030 

Message Request: 

Test the 1-way Ping service 


Message Response: 

Message delivered successfully. Please check: server logs to 
confirm message delivery. 


Figure 9-18 Example application input and results 


9.4 Configuring an Existing Web Service Provider Endpoint 

In this part of the web service sample, use the service provider endpoint deployed in the 
previous example as an existing web service provider endpoint. This web service could be 
any existing function provided by an existing application or third-party service supplier. 


9.4.1 Configuring the application 


To configure the application, complete the following steps: 

1 . Open the Virtual Application Builder. 

a. From the main menu, click Patterns -» Virtual Applications. 

b. Click New (R>1). Select Web Application Pattern Type 2.0 in the Pattern Type 


c. 


drop-down menu. 

Select Blank application and click Start Building. 
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2. Build the application using components in the Application Components section. Drag a 
Web Application component and an Existing Web Service Provider Endpoint to the Virtual 
Application Builder canvas (Figure 9-19). 



Figure 9-19 Add the application components to the virtual application 

3. Configure the web service client. 

a. Select the Web Application component in the canvas. This action allows you to add the 
required properties to the component. 

b. Click the Browse button next to the WAR File field and select the wssampl esei .war 
file. The WAR file is scanned after it is uploaded for any notation or resource 
references it might contain. 

c. Leave the Context Root field empty or add wssamplesei. 

4. We access the service provider installed earlier using its IP address and port number 

9080. The IP and port number were found on the running application instance provider’s 

Endpoint link. 

a. Select the Existing Web Service Provider component on the canvas. 

a. Enter the Service provider’s Host IP address and Port number. In this example, the 
Host IP is 172.16.39.233 and the port is 9080 (Figure 9-20). 




Existing Web Service Provider 
Endpoint 




Name: * 

Existing Web Service Provider Endpoint 


Host(IP):* 
172 . 1 6 . 39.233 
Port: * 

9080 


Figure 9-20 Configure the existing web service provider 
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5. Create and configure the link between the Web Application component and the Existing 
Web Service Provider Endpoint. 

a. Locate the connector dot on the Web Application component and drag it to the Existing 
Web Service Provider Endpoint (Figure 9-21). 


£ * fi X 

q Web Application 

, A 

Web Application 


■ J. Exi sti n g We b S e rvi ce P rovi d e r 
^ Endpoint 

Existing Web Service Provider Endpoint 


Figure 9-21 Create a link from the web application to the web service provider endpoint 

b. Click the link and enter PingService as the Service Name (Figure 9-22). 


Web Application — ► Existing Web 
^ Service P rovider E nd poi nt 

Web Application — ► Existing Web Service 
Provider Endpoint 

Service Name: * 

PingService 

Figure 9-22 Configure the service name 

c. Save the application as Jax-WS Endpoint (Figure 9-23). 


Save Application 

Name:* 

X 


Jax-WS Endpoint 


1 

Description: 



Client with External Endpoint 



Save as application template 



OK Cancel 



Figure 9-23 Save the virtual application 


9.4.2 Deploying and running the application 

The next step is to deploy the virtual application with the web service client. 

Complete the following steps: 

1 . Deploy the application and verify that the PingService works with the external endpoint. 

a. See 9.3.3, “Deploying the JaxWSService application” on page 240 for information 
about deploying the virtual application. 
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b. In the Virtual Application Instances window, click the application’s Endpoint link after it 
reaches the Running state. 

c. Add /demo at the end of the URL in the browser address bar and start it (Figure 9-24). 


http : . 172. 16 . 39 . 234: 9080/wssamplesei/demo 

Figure 9-24 Start the web service client 

d. The One-Way Ping service should echo your message and indicate that a response 
was generated (Figure 9-25). 


Message Options 



Send Message 

Connecting to... http : //localhost : 9030 
Me33age Request: 

Ping with external service endpoint 
Me33age Response: 

Me33age delivered successfully. Please check: server logs to 
confirm message delivery. 

Figure 9-25 Test the application 


Monitoring the virtual application: The IBM Workload Deployer user interface monitors 
aspects of the virtual application and the systems it runs on. For more information, see 
Chapter 13, “Managing virtual applications” on page 303. 
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10 


Virtual application pattern 
example: OSGi 


This chapter shows how to create a virtual application pattern containing OSGi components 
and how to deploy the pattern into your virtual machines. Much of this process is done 
automatically by IBM Workload Deployer and hidden from the pattern developer, who simply 
needs to design the virtual application pattern and deploy it. 

This chapter contains the following topics: 

► Scenario overview 

► Scenario prerequisites 

► Configuring the OSGi application 

► Deploying the OSGi application 


© Copyright IBM Corp. 2012. All rights reserved. 
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10.1 Scenario overview 


The Feature Pack for OSGi Applications and JPA 2.0 provides support for OSGi based 
enterprise applications in WebSphere Application Server V7. In WebSphere Application 
Server V8, the OSGi applications capability is integrated into the application server base 
function, and is enhanced to support in-place update and extension of applications while they 
are still running. IBM Workload Deployer V3.1 also supports OSGi applications, adding two 
OSGi components for use as parts of virtual application patterns (Figure 10-1). 


▼ OSGi Components 

Existing OSGi Bundle Repository 
OS Gi A p pi i cati o n 

1-0 We p he re Asp cat a n Se rve r 


Figure 10-1 IBM Workload Deployer OSGi Components 


► Existing OSGi Bundle Repository 

This component represents an external OSGi bundle repository. The attributes for the 
external OSGi bundle repository are: 

- Name: Specifies the name of the existing OSGi bundle repository. 

- Bundle repository URL: Specifies the location of the existing OSGi bundle repository. 
This attribute is required. 

► OSGi Application 

This component represents the OSGi application on WebSphere Application Server. The 
attributes for the OSGi application component are: 

- Name: Specifies the name of the OSGi application. 

- EBA file: Specifies the OSGi application (*.eba) to be uploaded. This attribute 
is required. 

In this scenario, the blog OSGi application shipped with WebSphere Application Server V8 is 
used to demonstrate how to build a virtual application with OSGi components. The application 
is a traditional blogging application used for publishing essay-length articles and allowing 
readers to add comments to them. 
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Figure 10-2 shows the blog application. 

It has the following components: 

1. An API bundle. 

2. A web bundle, blog-web, containing the HTML, Cascading Style Sheets (CSS), and Java 
code that provide the user interface. 

3. A blueprint bundle, blog-biz, that encapsulates the business logic. The entry point is a 
Blogging Service that is accessed through JNDI by the web application. 

4. A persistence bundle, blog-persistence-jpa, containing a standard persistence. xml file 
and entities representing the persistent data. 



The components of the blog example are packaged as an application.eba file. A file called 
createBl ogDb. sql is the schema file used to build the associated database and tables 
required by the application. 

For information about OSGi, go to the following address: 

http : / / publ ib.boulder.ibm.com/infocenter/radhelp/v8/index. jsp?topic=/com.ibm.etool 
s. iwd. doc/ topi cs/ciwdovervi ew. html 


10.2 Scenario prerequisites 

To run this example scenario, you must have the following prerequisites in place: 

► IBM Workload Deployer must be configured with a cloud group, hypervisor, and IP group. 

► You must accept the Web Application Pattern Type V2.0 license and enable the pattern. 

► You must accept the IBM Transactional Database Patterns VI .1 .0.0 license and enable 
the pattern. You must also configure the oltp plug-in. 

► You must have the following assets: 

- An application.eba file. 

- A createBlogDb.sql file. 
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► You must have “Create new patterns” authority in IBM Workload Deployer. 

► You must enable the pattern types required by this scenario: 

- Enable Web Application Pattern Type V2.0 (see “Enabling the Web Application Pattern” 
on page 174). (If you are using WebSphere Application Server V7, select WebApp 
Pattern Type VI .0.0.3 instead.) 

- Enable the database pattern types and configure the oltp plug-in (see “Enabling the 
database pattern types” on page 179). 


10.3 Configuring the OSGi application 


Next, build the virtual application pattern in the Virtual Application Builder by completing the 
following steps: 

1 . Click Patterns Virtual Applications. 


2. Click Add ( <=Q=> ) to create a pattern. 


a. Select Web Application Pattern Type 2.0 in the Pattern type field. 

b. Click Blank application, and then click Start Building (Figure 10-3). 


Create Application 

Start building your virtual application. 

Choose one template of selected pattern type to start building your virtual application. 


Pattern type 


Web Application Pattern Type 2.0 


Blank application 

Blank Java EE web application 


® More information 


Description: 

Blank application 

Preview: 


Start Building Cancel 


Figure 10-3 IBM Workload Deployer Virtual Application Pattern Creation 


The Virtual Application Builder opens in your browser, where you can drag the OSGi 
components onto the canvas to build your own application pattern. 

3. Build the application using the OSGi components. 
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a. Expand the OSGi Components section in the Assets list on the left. Drag the OSGi 
Application onto the canvas (Figure 10-4). 


IBM Workload Deployer - [ Pattern Type virtual Application Builder - [ untitled ] 


m 


Diagram ListView 

Source 


Q Save | (§]_ S ave As 

| Hh Layout 

Undo | Redo 

Hint; 

Assets 




^ OSGi Application 

1 

n 

=£= Add po 1 i cy fo r ap pi i cati o n 


► Application Components 

► Database Components 

► Messaging Components 
t OSGi Components 

^ Existing OSGi Bundle Repository 
i=i OSGi Application 

WebSphere Appieafon Server 

► Transaction Processing Components 

► User Registry Components 

► Other Components 


& ■x' Til X 
OSGi Application 


O 

A; 


OSGi Application 


Name: 


OSGi Application 


EBA File: : 


Browse 


Figure 10-4 IBM Workload Deployer OSGi Application 


b. In the right pane, enter the name of this application in the Name field, for example, 
OSGi Application. 

c. Click the Browse button next to the EBA File field. Select the .eba file with the 
application, in this case appl i cation. eba, and click Open. The .eba file is uploaded 
into IBM Workload Deployer (Figure 10-5). 


OSGi Application 


Name: * 

OSGi Application 


EBA File: * 

Browse Delete 


Figure 10-5 IBM Workload Deployer OSGi Application attributes 

4. Create the data source. 
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a. Expand Database Components in the Assets list and drag the Database component 
onto the canvas (Figure 10-6). 


Assets 

d 


► Application Components 

▼ Database Components 

Data Studio web console 

Database 

Existing Database 

Existing Database 

Existing Database a 

Llrtt Orade * h 

Existing IMS Database 

► Messaging Components 

► OSGi Components 

► Transaction Processing Components 

► User Registry Components 

► Other Components 


A 


^ Add policy" for application 


*3 OSGi Application 


OSGi Application 


A 


□ 


"H x 


Database 

Database 


Purpose: 


Production 


* So u rce 


Apply a database workload standard 
Maximum User Data Space (GB): 
flO 


Schema File: 


Browse 


Wor 

Type 


Dep; 

Tran 


Name Description 

For databases 
primarily used 
for online 
transaction 

„ . . . processing 

departments p > The 

Transactional databasewill 

be optimized 
for 

transactional 

applications. 

Database Compatibility Mode: 
DB2 [Default) 


Figure 10-6 IBM Workload Deployer database 
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b. In the right pane, enter the information required to create the database (Figure 10-7). 

• Name: Database 

• Database Name: mydb 

• Database Description: Database for blog sample 

• Purpose: Production 

• Source: Apply a database workload standard 

• Workload Type: Departmental Transactional 

• Maximum User Data Space (GB): 10 

• Database Compatibility Mode: DB2 (Default) 


□ 


Database 


Name: * 
Database 


Database Name: * 
mydb 

Database Description: 
database for blog sample 
Purpose: 

Production 


▼ Source 


Apply a database workload standard 
Maximum User Data Space (GB): 

10 


Name Description 


.■-.Departmental 

'^Transactional 


For databases 
primarily used 
for online 
transaction 
processing 
(OLTP). The 
database will 
be optimized 
for 

transactional 

applications. 


Workload 

Type 


Departmental 

Transactional 


Database Compatibility Mode: 

DB2 (Default) 

Schema File: 

Browse Delete 


Figure 10-7 Database component configuration 


c. In the Schema File field, upload the SQL file containing the commands that create the 
DB2 database and associated tables for the blog application. The file is uploaded as a 
Schema File into IBM Workload Deployer. The file in this example is 
createBlogDb.sql. 

5. Create the link between the OSGi Application and Database components. 
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a. Hover your cursor over the right side of the OSGi Application component until you see 
the link connector dot (Figure 10-8). 


to 

& * -fc 

X 


OSGi Application 

• 

Database 



A 

Database 


OSGi Application 



Figure 10-8 IBM Workload Deploy er OSGi Application Connection 


b. Click the connection dot and draw a line from OSGi Application to the Database 
component (Figure 10-9). The components provide warnings if there is missing 
configuration information. Hovering your cursor over the warning symbols provides 
more information. 


C S J Ta X 

OSGi Application 

• A 

Database 

a 


Database 


OSGi Application 


Figure 10-9 IBM Workload Deployer link between OSGi Application and Database 

6. Configure the link between the OSGi Application and Database components: 
a. Click the link to open the configuration palette in the right pane (Figure 1 0-1 0). 


Diagram ListView Source 


(SI Save I Ej. Save As I & Layout I Undo I Redo 


Assets 


K Add policy for application 


► Application Components 


0 OSGi Application — ► Database 
OSGi Application — ► Database 


► Database Components 


► Messaging Components 


▼ OSGi Components 


*3 


OSGi Application 


► Transaction Processing Components 


► User Registry Components 


► Other Components 



Connection timeout: : 


ISO 


Default Data Source for 2.x CMP Beans: 

□ 


Figure 10-10 IBM Workload Deployer link configuration 
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b. Click Select under the Resource References box and select the JNDI name for this 
blog application (Figure 10-11). After this step, the warning icon ([&]) in the OSGi 
Application component should disappear. 


Diagram ListView Source 


(^] Save | 0. Save As | Layout | Cp Undo | Redo 


Hints 


Assets 


Add policy for application 


► Application Components 


► Database Components 


► Messaging Components 


▼ OSGi Components 
^ Existing OSGi Bundle Repository 


*3 OSGi Application 


WebSphere Application Server 


► Transaction Processing Components 


► User Registry Components 


► Other Components 


0 OSGi Application -► Database 
OSGi Application — ► Database 
JNDI Name of Data Source: 



v|jdbD'blogdb in module com. ibm.ws.eba. example. blog. persistence.jar 


ion a I Data Source : i 


50 


Connection timeout: 1 


ISO 


Default Data Source for 2.x CMP Beans: 

_□ 


Figure 10-11 IBM Workload Deployer Link Configuration After selecting JNDI name 


c. Select the Non-Transactional Data Source check box (Figure 10-11). Failure to select 
this check box for the sample application causes an Error 500 when you try to create 
new post in this blog application: 

org. apache. aries. transact ion. except ion. Transact ionRol 1 backException: 
javax. transact i on. Rol 1 backException 

7. The application uses a second JNDI name for the data source. Create another link 
between the OSGi Application and Database components. 

a. Enter jdbc/blogdbnojta in JNDI Name of Data Source. 

b. Select the Non-Transactional Data Source check box. 
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The results are shown in Figure 10-12. 



Figure 10- 12 IBM Workload Deployer Link Configuration for another JNDI NameSave the virtual application pattern 
8. Save the virtual application. 

a. Click the Save button and enter OSGiEBA in the Name field and an optional 
Description. Click OK. 

b. After saving, close the Virtual Application Builder browser tab. 
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10.4 Deploying the OSGi application 


The next step is to deploy the application. 

Complete the following steps: 

1 . Back on the Virtual Application Patterns window, click the OSGiEBA pattern in the left 
pane (Figure 10-13). 


IBM Workload Deployer 



i Administrator | 0 Help | 

| About | Log 

Welcome Instances Patterns 

Catalog 

Reports 

Cloud System 



Virtual Application Patterns eSh ^ 

U- 


Name 

Web Application Pattern Type 2.0 
Data Studio-Web Cons o!e4Test 


OSGiEBA 


□ 


Sample Java EE web application □ 

Sample Web Application Only □ 

Secured Java EE web application □ 

Tradelite4Test □ 


OSGiEBA 
Application ID: 

Description: 
Created by: 

Last Modified by: 
Created on: 

Last Modified on: 


Preview: 


Deploy*] Open ^ Export X Delete 
a-a4eb0810-b49a-471d-89b8-cef029a5a70e 


Blank application 
cb admin 
cbadmin 

Oct 28, 2011 8:52:59 AM 
Oct 31, 2011 3:44:26 PM 


% 


□ 


Figure 10-13 IBM Workload Deployer OSGi Application Pattern Review 


2 . 


Deploy the OSGiEBA 
in 


a. Click £5 Deploy 


application. 

Figure 10-13, and the Deploy Virtual Application window opens. 
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b. Select the appropriate values for your target cloud group or environment profile 
(Figure 10-14). 


Deploy Virtual Application 
Name: 


OSGiEBA 


Select target environment profile: 


Filter by IP type: 

Filter by profile type: 
Profile: 

Cloud group: 

IP group: 

Select target cloud group: 
IP Version: 

Cloud group: 


IPv4 


IPv6 


All 


IPv4 


IPv6 


Default ESX group 


0 


OK 


Cancel 


Figure 10-14 IBM Workload Deployer Deploy Virtual Application 


c. Click OK. A message opens at the top of the Virtual Application Builder confirming that 
the virtual application is in the deployment process (Figure 10-15). 


OSGiEBA |E> Deploy! ^ Open ^ Export X Delete [sp Clone 

® Deploying the virtual application 'OSGiEBA 1 . You can check the status by [x] Close 

clicking here 



Figure 10-15 IBM Workload Deployer deployment status 

3. Check the OSGi instance information by completing the following steps: 

a. Click Instances -» Virtual Applications. 

b. Click the OSGiEBA instance in the left pane. 
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c. View the details of the deployed virtual application in the Virtual Application Instances 
palette. The details include a list of virtual machines provisioned on the cloud 
infrastructure for that deployment, the IP address, virtual machine status, and role 
status (Figure 10-16). 


- Virtual machine perspective (2 in total) 






Name 

Public IP 

VM Status 


Started on 

Role Status 

Database-db2. 

11319809228593 

172.16.39.224 

Running 

Q 

Log 

Oct 28, 2011 9:40:33 AM 

DB2 

Li Endpoint 

0SGi_ 








Application-was. 

11319809228583 

172.16.39.225 

Running 

□ 

* Log 

Oct 28, 2011 9:40:32 AM 

WAS 

L i Endpoint 


Figure 10-16 IBM Workload Deployer virtual machines 


4. Access the OSGi application. 

a. Click the WAS Endpoint link (Figure 10-16) and the detailed Endpoint link information 
for this OSGi application opens (Figure 10-17). 


In cloud group: Default ESX group 

Pattern tvpe: Web .Application Pattern Tvpe 2.0 

Endpoint information 

ENDPOINT: ihtt p : / 7i72l6.39.225T^ 

f vba tuaiapase-ap^j q •* tnapoinc 

- Virtual machine perspective (2 in total) 

Figure 10-17 IBM Workload Deployer Endpoint Information 


b. Click the http:// 172. 16. 39. 225: 9080/blog/ link, and another tab or browser opens to 
access the OSGi application (Figure 10-18). 



Figure 10-18 Blog application 
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Monitoring the virtual application: The IBM Workload Deployer user interface monitors 
aspects of the virtual application and the systems it runs on. For more information, see 
Chapter 13, “Managing virtual applications” on page 303. 
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11 


Database patterns and Data 
Studio web console example 


This chapter describes how to create a database pattern, deploy the pattern, and deploy the 
Data Studio web console component to monitor the database pattern for health 
and availability. 

This chapter contains the following topics: 

► Scenario overview 

► Creating and configuring the Data Studio web console 

► Creating the Data Studio repository database 

► Monitoring a database using Data Studio web console 


© Copyright IBM Corp. 2012. All rights reserved. 
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11.1 Scenario overview 


The Data Studio web console can be used for the following tasks: 

► View system health at a glance. 

► Drill down into alerts to understand problems. 

► Browse alert history. 

► View alert-related information to help solve the underlying problems. 

► Manage current application connections. 

► View the current state of the table spaces of your database. 

► View the status of utilities that are operating on your database. 

► Set up email or SNMP alert notification. 

► Manage user access to health monitoring across your databases. 

In this chapter, you create a virtual application pattern for the Data Studio web console and 
deploy it. You also create a virtual machine that hosts the repository database for the Data 
Studio web console. The repository database stores data, such as database connections and 
data server setup information, that the Data Studio web console uses to manage databases. 
Then you configure Data Studio web console with a connection to an existing database so 
that the database can be monitored. The high-level topology view is shown in Figure 11-1. 


D B4T est 



Figure 11-1 Data Studio web console and repository database 
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11.2 Creating and configuring the Data Studio web console 


The Data Studio web console is created using a virtual application pattern. This section 
shows how to create that pattern. 


1 1 .2.1 Creating the virtual application pattern 

In this section, you create a virtual application pattern to deploy the Data Studio web console. 

Complete the following steps: 

1 . Click Patterns Virtual Applications. 

2. Click the New icon (f^l) to create a pattern. 

3. In the window that opens, select Web Application Pattern Type 2.0 in the Pattern Type 
drop-down menu and click Blank application. Then click Start Building (Figure 11-2). 


Create Application 

Start building your virtual application. 

Choose one template of selected pattern type to start building your virtual application. 



Figure 11-2 Create virtual application 
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4. The Virtual Application Builder window opens. On the right side of the window, change the 
Name of this virtual application. In this example, enter DataStudioWebConsole4Test 
(Figure 11-3). 


Virtual Application 


Name: * 


DataStudioWebConsole4Test| 

1 


Description: 



Blank application 

m 


Type: * 

Application 

Template 

Locked pattern type: 



Figure 11-3 Rename the virtual application 

5. On the left side of the window, you have a list of components that can be used to create a 
pattern. Expand the Database Components category and drag the Data Studio web 
console component to the canvas (Figure 1 1 -4). 



Figure 11-4 Configure the Data Studio web console component 

6. Click the Data Studio web console component in the canvas to see its properties in the 
right pane of the Virtual Application Builder window. 

- The Name field contains a default value. You can change this name to a name of 
your choice. 
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- The Data Studio web console administrator user field is filled with a default value. 
Enter the user ID you want to use to access the console. 


- Enter the password to be assigned to the new user in the Data Studio web console 
administrator user password field. 


7. Click the Save icon ([jgj|) to save the pattern, then click the Close icon (pT|) to close the 
virtual application builder window. 


11.2.2 Deploying the pattern to the cloud 

To deploy the virtual application pattern, complete the following steps: 

1 . Click Patterns -» Virtual Applications. 

2. Select DataStudioWebConsole4Test in the list of patterns. 

3. Click the Deploy icon in the right pane (Figure 11-5). 


D ata Stud ioWe bConso le4T e st 

Deploy Open Export X Delete |]0 Clone 

Application ID: 

a-84dbl5S7-5803-4754-a42b-955cdfe017c8 

Description: 

Blank application 

Created by: 

■cbadmin 

Last Modified by: 

cb admin 

Created on: 

Oct 28, 2011 2:37:03 PM 

Last Modified on: 

Oct 28, 2011 2:37:37 PM 


Figure 11-5 Deploy the virtual application pattern 
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4. Provide all the information requested in the window shown in Figure 11-6. 

a. Enter DataStudioWebConsole4Test as the name of this virtual application. 

b. Select an option for deployment. In this example, the application is deployed by 
specifying a cloud group (the Select target cloud group option). 

c. Click OK. 


Deploy Virtual Application 
Name: 


Data Studio WebConsole4Test 


All 


Select target environment profile: 
Filter by IP type: 

Filter by profile type: 

Profile: 

Cloud group: 

IP group: 

Select target cloud group: 

IP Version: 

Cloud group: 


IPv4 


IPv6 


IPv4 


IPv6 


Default ESX group 


OK 




Cancel 


Figure 11-6 Deploy virtual application pattern parameters 
5. A message is displayed (Figure 11-7) and shows that the deployment is in progress. 


® Deploying the virtual application 'DataStudioWebConsole4Test'. You can [x] Close 
check the status bv clicking here 

Figure 11-7 Deployment message 

6. Click Instances -» Virtual Applications (or click the clicking here link in the window). 

7. In this list of virtual application instances, click DataStudioWebConsole4Test. The status 
of this application is displayed on the right side of your window. When the deployment is 
finished, the Status field has a status of RUNNING. 


11.2.3 Logging on to the Data Studio web console 

The next step is to log on to the web console. 
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Complete the following steps: 

1 . From the virtual application instance, click the Endpoint link (Figure 1 1 -8). 


d-4f0 lc2cc-2055-4f94-bald- 
e31862f06a4f 


Virtual application instance ID: 

Status: 

In cloud group: 

Pattern type: 

- Middleware perspective (1 in total) 

► DSWC (Data_Studio_web_console-dswc) U Endpoint 

- Virtual machine perspective (1 in total) 


Running U 

Default ESX group 

Web Application Pattern Type 2.0 


Name 

Public IP 

VM 

Status 

Started 

on 

Role Status 

D ata_Stu d i o_ w e b_ 

console-dswc. 

11319828092412 

172.16.39.226 

Running 

Q 

* Loo 

Oct 28, 
2011 
2:54:54 
PM 

DSWC □ 
Endpoint 


Figure 11-8 Deployment complete 

2. In the Endpoint information window, click the link (Figure 1 1 -9). 


Endpoint information 

X 

ENDPOINT: http ://9.42. 17 1.65: 11080/datatools/console?i 

username =admin&i password =adminl 

ti 


Figure 11-9 Endpoint information 


Chapter 1 1 . Database patterns and Data Studio web console example 


267 


3. The Data Studio web console login window opens (Figure 11-10). Enter the user name 
and password you defined in step on page 264 and click Log In. 


Data Studio 

Log In 

User name: 
admin 

Password: 


I Log In I 

Licensed Materials - Property of IBM Corp. 

[C) IBM Corp. and its licensors) 2003,2011. 
IBM and the IBM logo are trademarks of IBM 
Corp. 

In the United States, other countries, or both. 


Figure 11-10 Sign in to Data Studio web console 
4. The Data Studio web console window opens (Figure 11-11). 




Figure 11-11 Data Studio web console window 


11.3 Creating the Data Studio repository database 

The Data Studio web console uses a database to store database connections, alert settings, 
and user authentication settings. This section creates and deploys a database to use as 
the repository. 
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11.3.1 Creating and deploying the database pattern 


A database pattern is a pattern type that creates and deploy database in a 
Database-as-a-Service (DBaaS) cloud environment. In this section, a database pattern is 
created and deployed for use as the repository database of Data Studio web console. 


Complete the following steps: 

1 . Click Patterns -» Database Patterns. 


2. Click the New icon ( |<>| ) to create a database pattern. 

3. Provide all the information requested by the window shown in Figure 11-12: 

a. Enter a unique name for Database pattern name (DB4Test in this example). 

b. Select Production in the Purpose field. 

c. From the Source list, select Apply a database workload standard (a new database is 
created). Select Departmental Transactional as the workload pattern. 

d. From the Database Compatibility list, ensure that DB2 (Default) is chosen. 

e. Click the Save button. 


Note: When using the database pattern, you can use a predefined script to initialize 
the database by selecting it in the Schema File field. In this example, leave it blank, 
because you want an empty database. 


Database Pattern 


Specify options for your database pattern. 


Database pattern name: DG4Test 

Database pattern description: 

Purpose: 

Source: 

Name Workload Type 

® Departmental Transactional Departmental Transactional 


Production 


Apply a database workload standard 


Data Mart 


Data Mart 


Maximum User Data Space 
(GB): 

Database Compatibility Mode: 

Schema File: | Browse | 


10 

DG2 (Default) 


Save 


Cancel 


Figure 11-12 Database pattern parameters 
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4. In the list of database patterns, click DB4Test. In the right pane of the window, click 
Deploy (Figure 11-13). 


DB4Test 

Deploy ^ Open X Delete 

Database Pattern ID: 

a-ef66bfa6-eelf-4df0-a54d-142d4c3e6220 

Created by: 

cbadmin 

Last Modified by: 

cbadmin 


Figure 11-13 Deploy database pattern 


5. Provide all the information requested by the window shown in Figure 11-14. 

a. Enter name of the database. In this example, enter DB4Test. 

b. Enter the deployment options. In this example, the database is deployed to a cloud 
group (select Select target cloud group). 

c. Click OK. 


Deploy Database from Database Pattern 

Name: 

Description 

Select target environment profile: 

Filter by IP type: IPv4 IPv6 

Filter by profile type: 


DB4Test 


Profile: 

Cloud group: 

IP group: 

Select target cloud group: 
IP Version: 

Cloud group: 



IPv4 IPv6 


Default ESX group 


x 


OK 



Cancel 


Figure 11-14 Deploy options for database pattern 


6. Click Instances -» Databases. 
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7. From the list of database instances, click DB4Test. The status of this instance is 
displayed in the right pane. When the deployment is complete, you see the access 
information shown in Figure 11-15. 


DB4Test Start ^ Stop U Destroy X Delete CS Manage 


Database ID: 

Created by: 

Database Description: 

Host: 

Port: 

User (Application DBA) 

User (Application DBA): 

Password (Application DBA): 

JDBC URL (Application DBA): 

User (Application User) 

User (Application User): 

Password (Application User): 


d-lf3feb21-81fc-4e80- 

a6cc-62d8307cc274 

cbadmin 

172.16.39.230 

50000 

appdba 

Show 

Show 


appuser 

Show 


JDBC URL (Application User): 


Show 


Figure 11-15 Database instance status 


Two user IDs are created: appdba and appuser. The passwords for these user IDs can be 
seen by clicking the Show button. 


11.3.2 Changing the password for the sysadm user 

In this section, you configure the new database as the repository database for the Data 
Studio web console. 


SSH public/private keys required: The Data Studio web console needs to connect to the 
database as a user with sysadm privileges. The appdba and appuser IDs do not have 
sysadm privileges. There is another user called db2inst1 that is created by default in the 
database, but the password is not displayed on the IBM Workload Deployer user interface. 
In the next step, you connect to this database through SSH and replace the initial 
password for user db2inst1 manually. 

To complete this operation, you need to have one pair of SSH public and private keys 
available. You need them to connect to the database. You can use a public and private key 
pair generated at deployment, as described in 8.4, “Virtual application deployment” on 
page 219. 
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The next step is to configure the Data Studio web console to use the repository database. 
Complete the following steps: 

1 . There is a toolbar displayed at the upper right of the Database Instance window 

(Figure 1 1-15 on page 271). The buttons available are Start (start this database), Stop 
(stop this database), Destroy (destroy this database), Delete (delete this database), and 
Manage (start the database service console). 

Click Manage to open the Database Service Console window (Figure 11-16). 


IBM Workload Deployer 

— mrnrnm 

5^ Welcome, cbadmin | Database ID: d-lf3feb21-81fc-4e80-a6cc-62d8307cc274 

Operations 

X 


AGENT 

AGENT 

\±\ Create a database image 

database-db2,DB2 

MONITORING 

SSH 

DB2 

MONITORING 

SSH 

±\ Update configuration 

l+J List all database images 

[#J Automatic scheduled database backup 

Operation Execution Results 

% 



Name Status Created Time Result Return Value 

Automatic nr+n 9 nn database- database-db2. 11320087619702. DB2: 

scheduled Done -vogTo PM db2. 11320087619702. DB2: Changed the frequency of automatic 

database backup . . - Success scheduled database backup to 'off 

Figure 11-16 Database Service console 

2. In the Operations list, click SSH. In the right pane, expand Add or update VM SSH public 
key. 

3. Copy and paste your public key in to the Public Key box and then click Submit 
(Figure 11-17). 



Figure 11-17 Set your SSH public key to the database 
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4. In the Confirm window, click Yes (Figure 1 1 -1 8). 


Confirm 

X 

Are you sure? If a public key already exists on the VM for this user, it will be replaced. 

Yes 

No 


Figure 11-18 Confirm SSH public key replacement 


5. If the operation completes successfully, you see the result message in the Operation 
Execution Results table (Figure 11-19). 


Operation Execution Results 


Name 

Status 

Created Time t 

Result Return Value 

Add or update 
VM SSH public 
key 

Done 

@r 

Nov 1, 2011 
11:03:27 AM 

database- 

db2. 11320037619702. SSH: 
Success 


Figure 11-19 SSH key replacement successfully 


6. Connect to the database using SSH and your private key, and log in as the virtuser user 
(Figure 11-20). 


login as: virtuser 

Authenticating with public key "imported openssh key” 

-bash-3. 2$ sudo su - 

-bash-3.2# 


Figure 11-20 Login 

7. Run sudo su - and press Enter. 

8. Run passwd db2instl and press Enter. You are prompted to enter a new password for the 
user and retype the password to confirm it (Figure 11-21). 


login as: virtuser 

Authenticating with public key "imported-openssh-key” 

-bash-3. 2$ sudo su - 

-bash-3.2# passwd db2instl 

Changing password for user db2instl. 

New UNIX password: 

BAD PASSWORD: it is based on a dictionary word 
Retype new UNIX password: 

passwd: all authentication tokens updated successfully. 
-bash-3.2# 


Figure 11-21 Change the password for user db2inst1 

9. Log out and close the SSH connection. 

The database preparation is now complete. In the next section, we configure this database as 
repository database for Data Studio web console. 
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11.3.3 Configuring Data Studio web console to use the repository database 

In this section, we configure the repository database for Data Studio web console and then 
configure the database connection. 

1 . On the Data Studio web console, click Open -» Configuration Repository 
(Figure 11-22). 



Task Launcher 
Databases 
® Job Manager 
& Health 

Health Summary 
Alerts 

Current Application Connections 
Current Table Spaces 
5 Current Utilities 

Data Sharing Members 
zf OS System Log 
123- Product Setup 


e. Key tasks and getting-started tasks a 


Configuration Repository 


Console Security 
Manage Privileges 
Services 
$ Logs 




ts and indicators by severity and time for 


your databases. 


ns that are currently active for a selected 


Select or detach a repository database, and select 
the type of data to store. 


Figure 1 1-22 Open configuration repository tab 


2. On the Configuration Repository tab, click Select Repository Database (Figure 11-23). 



Figure 1 1 -23 Select repository database 

3. In the Edit Database Connection Profile window, enter all the required information 
(Figure 11-24 on page 275). 

- For Data server type, select DB2 for Linux, UNIX, and Windows. 

- For the database name, host name, and port number, use the values from the 
database instance (Figure 11-15 on page 271). 

- For JDBC security, select Clear text password. 
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- For User ID, enter db2inst1 . 

- For Password, enter the password you set in step 8 on page 273. 



Figure 1 1-24 Database connection profile 

4. Click Test Connection. If everything is correct, you get the message shown in 
Figure 11-25. 

Success Q 



The connection to M ET A_D B_C O N N E CTIO N_ID 
was successful. 


OK 


Figure 11-25 Test connection 
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5. Click OK. The repository database configuration is shown in Figure 1 1 -26. 



Figure 1 1 -26 Repository database is configured 


11.4 Monitoring a database using Data Studio web console 

The Data Studio web console provides health and availability monitoring features for 
databases. You can use it to view alerts, applications, utilities, storage, and related 
information. This section shows how to view database health at a glance, browse alert 
history, and set up email alert notification. 

For more details about Data Studio web console, go to the Information Center found at the 
following address: 

http : //publ ib.boul der.i bm.com/i nfocenter/dstudi o/v3r 1/topi c/com. i bm.datatool s .db.w 
eb.heal th. doc/topi cs/introduci ngdshm.html 


1 1 .4.1 Adding a database to monitor 

The last step is to add database connections and enable monitoring for them. Use an existing 
DB2 database in this process. 
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Complete the following steps: 

1 . Click Open -3 Database in the Data Studio web console (Figure 1 1 -27). 


I Task Launcher 


■ ■ Task Launcher 

□ 

e. Key tasks and getting -started tasks are shown 

Databases 



Job Manager 

Manage database connections and enable them 1 

123 Health 

Health Summary 
Alerts 

for monitoring. 



ts and indicators by severity and time for all 

Current Application Connections 


Current Table Spaces 


• Current Utilities 
■+ Data Sharing Members 

your databases. 

z/OS System Log 
i23 Product Setup 


ns that are currently active for a selected 

Configuration Repository 


Console Security 
Manage Privileges 
Services 


i for execution on your databases. View 

Logs 

> 




Figure 1 1-27 Open database tab 
2. On the Database tab, click Add (Figure 11-28). 



Open 4 



© Show all database 
connections 


These database connections are shared 
Tip: For improved scalability r function, a 


© Filter database 
connections by 


Host and port 

JB A|1 




H a rwi a x 

Add a database connection. 


Figure 1 1-28 Click the Add button to add a database connection 
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3. Log on to a repository database. Because you have a defined repository database, the 
Connect to the repository database DB4Test window is shown. Enter the db2inst1 user ID 
and password, and then click Log In (Figure 11-29). 



Figure 1 1-29 Log on to the repository database 

4. In the Add Database Connection window, enter all the required information (Figure 11-30). 
In this example, we access an existing database. 



Figure 1 1-30 Add a database connection 
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5. Click Test Connection. If everything is correct, a Success message is displayed 
(Figure 11-31). 



Figure 11-31 Test connection successful 

6. Click OK. The database connection is saved in the configuration repository, and is shown 
in the table in the Database tab (Figure 11-32). 


Add... 

|=tf | b 

| ifi Refresh Import... Export All... 


Name 

Data Server Type 

Database Name 

Hast Name 

Port Number 

My DB. 

□ B2 for Linux r UNIX r and Windovs 
[V9.7.4) 

mydb 

172. IS. 39. 224 

50000 


Figure 1 1-32 Database connection is added 


11.4.2 Viewing database health at a glance 

To view the health of the database in the console, complete the following steps: 
1 . Click Open -» Health Summary (Figure 1 1 -33). 


t Task Launcher 
Databases 
Job Manager 
& Health 


Health Summary 


Alerts 
Current Application 




□ 


e. Key tasks and getting -started 


View health and performance summaries for your 
data sources. 
s$ Current Table Spates 


Figure 1 1-33 Health Summary button 
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2. The Health Summary tab opens (Figure 1 1 -34). This tab shows provides a high-level view 
on the health status of this database. 



Figure 1 1 -34 Heath Summary at a glance 


- The number of Critical Alerts and Warning Alerts are displayed. 

- The green diamond in the Data Server Status column indicates that the database 
availability is at normal status. 


- There are columns for system status and for database status. Click the setting icon 
(f®l) of each column to open the corresponding configuration window. 
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3. As an example of setting the configuration for the status columns, click the setting icon for 
the Connections column, which opens the alert configuration window shown in 
Figure 11-35. 



Figure 1 1-35 Database Connections alert configuration 

4. Click the Connections row in the table, then click Edit... to open the Edit Alert Parameters 
window shown in Figure 11-36. 


Edit Alert Parameters 


a 


Alert type: 
Database: 

Alert description: 
Enabled: 

Critical threshold: 
Warning threshold: 


Connections 
My DE 

The number of application connections to this database. 

□ 


LEO 


IDO 


OK 


Cancel 


Figure 1 1 -36 Edit Alert Parameters 


5. Select the Enabled check box and click OK. Optionally, change the Critical threshold 
values and Warning threshold values. 
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6. Back in the Health Alerts Configuration window, click Close. 

11.4.3 Browsing the alert history 

To browse the history of alerts in the web console, complete the following steps: 

1 . Click Open Alerts (Figure 1 1 -37). 


Open -I- J Task Launcher 


t Tfask Launcher! 

@ Databases 
@ Job Manager 
3 [>, Health 

® Health Summary 

e. Key tasks and getting 


ts and indicators by sevi 

- Alerts k 

uurrentAppI view alerts and configur 
0 Current Tabli databases. 

e alert settings for your 

Current Utilities 

your databases. 


Figure 11-37 Alerts 


2. The Alerts tab shown in Figure 1 1 -38 opens. Select the Alert List tab to browse all 
the alerts. 

3. Click the specific row on the table to display the details of the current alert at the bottom of 
the window, such as the severity level of the alert and a description. To the right are 
suggested actions to take. 



Alert List | Health Aleirts Configuration j Alert Notification 



l total items | s | » | Items per eege Page | 1 , » | of 1 ^ 


Alert Details 



Alert Delrtilb 



Alert Description 


Actions 

Category Data Server status 

Severity | Normal 

Shavro the availability ef the database. 

Manage database 

connection* and Datable? 

ana bla them far 
monitoring. 


Figure 11-38 Alert List 
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4. Click the Health Alerts Configuration tab to see all configured health alerts 

(Figure 11-39). You can also browse to a specific health alert configuration and edit the 
settings. 



Figure 11-39 Health Alerts Configuration subtab 

11.4.4 Configuring email alert notification 

To use the alert notification feature, an SMTP server must be defined to the IBM Workload 
Deployer. See the Information Center topic found at the following address if you have not set 
up this notification: 

http : //publ i b . boul der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. worl odep. do 
c/aa/aat_mai 1 deui . html 
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To configure email notifications of alert conditions, complete the following steps: 
1 . Click the Alert Notification tab (Figure 11-40). 



Figure 1 1-40 Alert notification list table 

2. Click the My DB drop-down menu to select the target database connection (Figure 11-41). 



zftz My DB T 

Uf 


Figure 11-41 Select database connection to be monitored 
3. Click the database connection that you want to add the alert notification to (Figure 1 1 -42). 

Select Database 



Figure 1 1 -42 Select Database 
4 . Click Add (Figure 11-43). 



Figure 1 1-43 Click the Add button to create an alert notification 
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5. In New Alert Notification window, select the type of alerts and the severity level you want 
to monitor. Add your email addresses and click OK (Figure 11-44). 



Figure 1 1 -44 New alert notification 
6. Alert notification is added for the list (Figure 1 1 -45). 



Figure 1 1-45 Alert notification is added 
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Custom plug-ins for virtual 
application patterns 


This chapter introduces the use of custom plug-ins to extend your virtual application patterns 
or to create pattern types in IBM Workload Deployer V3.1 . Custom plug-ins are developed 
with the IBM Workload Plugin Development Kit, shipped with the IBM Workload Deployer 
V3.1 . You can download the kit from the Welcome window of the IBM Workload Deployer 
user interface. 

Development of custom plug-ins is outside the scope of this book, but it is important to know 
that this capability exists and to have an idea about how to use custom plug-ins. This chapter 
provides an overview of plug-ins, and how custom plug-ins can be used to create 
custom patterns. 

To learn more about how to develop plug-ins, go to: 

http ://wwwl4. software.! bm.com/webapp/iwm/web/preLogin.do?source=swg-pl ugi ndeki t 

For more information about IBM Workload Plugin Development Kit, go to: 

http : //www. i bm.com/devel operWorks/cl oud/1 i brary/cl -wdcl oudpatterns/i ndex . html 

The chapter contains the following topics: 

► Technology overview of plug-ins and pattern types 

► Scenario overview 

► Installing a custom pattern type 

► Configuring a custom virtual application pattern 

► Deploying a custom application pattern 

► Viewing the deployed application 
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12.1 Technology overview of plug-ins and pattern types 


The first step in understanding the concepts presented in this chapter is to distinguish the 
following two terms: 

► A plug-in is the basic unit of content for virtual application workloads. It is a collection of 
files packaged as a . tgz archive that implements a specific capability, such as the 
WebSphere Application Server plug-in, to host WAR, EAR, and EBA applications, or the 
JVM policy plug-in, to specify functional and non-functional requirements for your 
application environment. 

► A pattern type is a collection of plug-ins designed for a specific type of workload, such as 
Web Applications Pattern Type V2.0 or IBM Database Patterns VI .1 . A pattern type is 
also a .tgz file that may contain several files, such as associated plug-ins, and license 
and localized messages. 

Virtual application patterns are created from pattern types. Figure 12-1 is an example a 
virtual application pattern created from Web Application Pattern Type V2.0. 



As you can see, a virtual application pattern consists of components, links, and policies: 

► Components represent functional profiles for a workload, such as web applications 
and databases. 

► Links define a connection between components in the pattern. In Figure 12-1 , a link 
specifies that the Web Application component has a dependency on the Database 
component. 

► Policies like the JVM Policy shown in Figure 12-1 allow you to specify functional and 
non-functional requirements for your application environment. 

The plug-ins of the pattern type define these components, links, and policies and their 
functionality in the virtual application pattern, which means that you can select a pattern type 
(Web Application Pattern Type V2.0, IBM Transactional Database Pattern, or other custom 
pattern type) and use the associated plug-ins to design your own virtual application pattern. 
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12.2 Scenario overview 


This scenario describes how to import a custom pattern type and use the custom plug-ins in 
this pattern type to design the virtual application pattern. 


Samples: For more information about the PDK sample, see the following topic in the IBM 
Workload Deployer Information Center: 

http : //publ i b . bout der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. wort odep 
.doc/pl ug/pgr_pdksampl e. html 

The scripts are also included in “Plugin Development Kit Hello Center example” on 
page 394. 


The custom pattern type example is packaged as a .tgz file (Figure 12-2). 


□ 15) patterntypetest 

yvj 5) licenses 

□ Q patterntypetest. basic 

5) locales 

5) licenses 

§| .project 

□ 5) locales 

,=, build . patternty pe . xml 

5) de 

H^patterntype.json 

5) en 


5) es 


5 fr 


5) it 


5) ja 


5) ko 


5) pt 


5) zh 


5) zh _™ 



Figure 12-2 Custom pattern type example package structure 

This sample pattern type patterntypetest. basic includes three plug-ins (Figure 12-3). 


& Tii X 

Hello Plugin Hello Center Plugin 

Hello plug-in HCenter plug-in 

Figure 12-3 Sample plug-ins 

► HCenter Plugin 

This plug-in provides a simple message center application that listens to client requests, 
and then generates and returns greeting messages. The plug-in has the following lifecycle 
scripts: 

- i nstal 1 . py: Downloads artifacts from a storehouse and installs the middleware. 

- configure.py: Downloads the artifacts uploaded by the plug-in and configures 
the middleware. 

- start . py: Starts the HelloCenter server. 

- stop . py: Stops the HelloCenter server. 
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Figure 12-4 shows the directory structure for the scripts. 


iplugin. com. ibm. sample, hello center i 
© src 

©■■■Mft JRE System Library [JavaSE~1.6] 
© Flug“in Dependencies 

©■"S 7 export 
| © & META-IHE 

! © OSGI-IHE 

Q & plugin 

©• ”123 appmodel 
© images 
© S? locales 

_] metadata, j son 


©■ S? files 
$■ (S parts 

Q S? he enter, scripts 



0-S 5, templates 

hello center, vm 
_| confi g. j son 
tIU build, plugin, xml 


Figure 12-4 HCenter Plugin 
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► Hello Plugin 

This plug-in is the client component of HelloCenter. It sends a request with the message 
sender identity to the Hello Center and displays the returned greeting on the console. This 
plug-in contains the following scripts (Figure 12-5): 

- conf i gure . py: Logs the sender information. 

- start. py: Changes the role status to Running. 


0 'Jj £7 iplugin. com. ibm. sample, hello j 
© 0 sr c 

© .IRE System Library [JavaSE~1.6] 
Plug- in Dependencies 
| © QB META-IHP 


($)■■& OSGI-IHE 
© QB plugin 

0 appmodel 
© |^7 images 
©•••^7 locales 

_] metadata, j son 


Q-& parts 

Q & hello, scripts 
Q QB scripts 


1 0-1^7 Hello 



confi gure. py 
_] start, py 

J ms 

tall, py 


0 £3 templates 

hello, vm 
_] confi g. j son 
49 build, plugin, xml 


Figure 12-5 Hello Plugin 
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► HCIink Plugin 

This plug-in links Hello to HCenter and specifies the receiver name of the greeting 
message. This plug-in contains the following scripts (Figure 12-6): 

- changed. py: Checks to see whether the HelloCenter exists and reads the transferred 
parameters from HelloCenter. 


0-^7 Iplugi n. com. ibm. sample, hclink j 

0 0STC 

0 B& .IRE System Library [JavaSE - 1.6] 
© Eifo Plug-in Dependencies 
E ) & export 
El [~3 i 18n 
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$ OSGI-IHE 
□ l23 plugin 

0 appmodel 
0 locales 

_j metadata, j son 
□ |23 parts 

0 - £3 hclink. scripts 
0 23 scripts 
I (=)■■& Hello 


0 - P3 H) 

B 


HCenter 


install, py 
0 23 templates 

[p] Hclink. vm 

_j confi g. j son 
build, plugin, xml 


_] changed, py 


Figure 12-6 HCIink Plugin 


12.3 Installing a custom pattern type 

To use a custom pattern type, you must install it by completing the following steps: 

1 . Log on to the IBM Workload Deployer as an administrator or as a user with permission to 
create a pattern type. 
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2. From the menus on the top of the page, click Cloud -» Pattern Types (Figure 12-7). 



Figure 12-7 IBM Workload Deployer Pattern Types 


3. Click the Add icon (Q) to install a pattern type (Figure 12-8). 



Figure 12-8 IBM Workload Deployer Pattern Types installation 


4. Browse to the .tgz file. The upload starts automatically. 

After uploading the file, the added pattern type patterntypetest .basic 1 . 1 is displayed 
on the left side of the user interface. 
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5. Click patterntypetest.basic 1.1. 0.0 to display the associated attributes in the right 
portion of the user interface (Figure 12-9). 



6. Accept the custom pattern type license agreement. 

a. In the License Agreement field, click Accept. The patterntypetest.basic 1 .1 .0.0 
window opens. 

b. After reading the license agreement, click Accept. The License Agreement changes 
to Accepted. 
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7. Click Enable to change the pattern type status to Available (Figure 12-10). 


IBM Workload Deployer 
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System 
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IBM Workload Deployer Pattern Type for Web 
Applications 
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& 



License Agreement: 

$$ Accepted 

[ View... ] 

IBM Transactional Database 
Pattern 1.1 
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i— | 
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Plug-ins: 
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IBM Transactional Database 
Pattern 1.1. 0.0 
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patterntypetest.basic 1.1. 0.0 
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Figure 12-10 IBM Workload Deployer custom pattern type status: Available 


12.4 Configuring a custom virtual application pattern 

You can now use the custom pattern type patterntypetest.basic 1 .1 and the associated 
plug-ins to design your own virtual application pattern. 

Complete the following steps: 

1. Create a file on your local file system named sample_userl i st. json. This file contains the 
sample input for the plug-in. The contents of the file is one line: 

["Mike", "Alice", "Joe"] 

2. In the IBM Workload Deployer user interface, click Patterns -» Virtual Applications to 
open the Virtual Application Builder. 
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3. Click the Add icon (c£>) to create a new virtual application pattern. 


a. Choose patterntypetest.basic 1.1 as the Pattern type, and then click Start Building 
(Figure 12-11). 


Create Application 

Start building your virtual application. 

Choose one template of selected pattern type to start building your virtual application. 
Pattern type 

patterntypetest.basic 1.1 T 


No templates exist. 


Start Building Cancel 

Figure 12-1 1 IBM Workload Deployer virtual application pattern creation 

b. The Virtual Application Builder is opened in your browser, where you can drag the 
associated components in this custom pattern type onto the canvas to build your own 
application pattern (Figure 12-12). 


IBIU1 IJKah 




V 


vinuai Application tjunaer- 1 unnnea j 

Diagram 

ListView 

Source 


12 Save | 

H Save As 

IfH Layout 

| Undo | S£> Redo 

Hints 


Assets 


* Add policy for application 


~w 


n 

Hello Center Plugin 

a 

Hello Plugin 


j Virtual Application 
Name: * 


untitled 


Description: 


Type: * 

Application 

Template 

Locked pattern type: 


Figure 12-12 IBM Workload Deployer Virtual Application Builder 
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4. Create an application using the plug-ins of the custom pattern type. 

a. Drag the Hello Plugin and Hello Center Plugin components in the left palette into the 
middle section of the editor. Click the white space of the canvas and, in the right pane, 
enter a name for the properties for the virtual application (Figure 12-13): 

• Name: Sample 

• Description: This is a custom virtual application 

• Type: Application 

• Locked pattern type: Not checked 






□ 

iDivi vvomoaa uepioyer - 

i™ 1 " virtual application Builder - [oampie j 


Diagram ListView Source 

Save | Save As | [Si Layout | 0 Undo | <s> Redo 



Hints 

Assets 

PI 

Add policy for application 


J Virtual Application 


Li=J 



Name: * 



T 



Sample 



y 3 Hello Center Plugin 



Description: 



Hello Plugin 



This is a custom virtual application 




Hello Plugin 

Hello Center Plugin 





Hello Plugin 

A 

Type: * 





Hello Center Plugin 

Application 






Template 






Locked pattern type: 

_ 



Figure 12-13 IBM Workload Deployer custom virtual application design 


b. Click the HelloCenter Plugin in the middle section of the editor. In the right attributes 
view, type Hello Center in the Hello Center Name attribute field and upload the created 
sample_userlist.json file in the Registered User List field (Figure 12-14). 


a Hello Center Plugin 


Name: * 

Hello Center Plugin 


HelloCenter Name: * 

Hello Center 
Registered User List: * 

artifacts sa m plexus erl Browse Delete 

Figure 12-14 Hello Center Plugin attributes 

c. Click the Hello Plugin in the middle section of the editor. In the right attributes view, 
type one of the following names: 

• Mike 

• Alice 

• Joe 
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For example, type Joe in the Sender Name field (Figure 12-15). 




Hello Plugin 


7 


Name: * 
Hello Plugin 


Sender Name: 

Joe 

Figure 12-15 Hello Plugin attributes 

d. Link Hello Plugin to Hello Center Plugin. 

Click the link and type any name in the receiver of greeting message attribute field. For 
example, type Sherry in the “The receiver of greeting message” field (Figure 12-16). 


Add policy for application 

S7? Hello Plugin Hello Center 

Plugin 


Hello Plugin -fr Hello Center Plugin 

The receiver of greeting message: * 
Sherry 

$ Ta X 

Hello Plugin ^ ,, *# f ) Hello Center Plugin 


Hello Plugin Hello Center Plugin 



Figure 12-16 HCLink attributes 

e. Save this application and return to the Virtual Application Patterns window. 

12.5 Deploying a custom application pattern 

Now you can deploy the custom application pattern into the cloud by completing the 
following steps: 

1 . Click Patterns Virtual Applications. 

2. Deploy the custom application. 

a. Click the Sample pattern on the left side of the palette. 
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b. Click |gv, Deploy] in Figure 12-17, and the Deploy Virtual Application window opens. 


IBM Workload Deployer 


X Administrator | 0 Help | About | Logout 

Welcome Instances Patterns 

Catalog 

Reports Cloud System 

Virtual Application Patterns % ^ # 

Sample 

tb- Deploy ^ Open ^ Export X Delete [p Clone 

Name tl T 

Application ID: 

a-e89295f7-lc2b-4061-af96-0b063155c2bb 

patterntypetest.basic 1.1 

Description: 

This is a custom virtual application. 

Sample □ 

Created by: 

cbadmin 


Last Modified by: 

cbadmin 


Created on: 

Nov 4 f 2011 11:23:45 AM 


Last Modified on: 

Nov 4, 2011 4:00:59 PM 


Preview: 

1 0 B 


Figure 12-17 IBM Workload Deployer custom application pattern review 

c. Select the appropriate values for your target cloud group or environment profile 

(Figure 12-18). If you want to be able to access the systems with SSH, be sure to click 
the Advanced box and generate a key. 


Deploy Virtual Application 
Name: 


Sample 


Select target environment profile: 


Filter by IP type: 

Filter by profile type: 
Profile: 

Cloud group: 

IP group: 

Select target cloud group: 
IP Version: 

Cloud group: 


IPv4 


All 


IPv4 


IPv6 


IPv6 


Default ESX group 


u 

0 


OK 


Cancel 


Figure 12-18 IBM Workload Deployer Deploy Virtual Application 
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d. Click OK. A message opens at the top of the Virtual Application Builder confirming that 
the virtual application is in the deployment process (Figure 12-19). 


Sample Deploy! # Open ^ Export X Delete |p Clone 

® Deploying the virtual application 'Sample 1 . You can check the status by [x] Close 

clicking here 

Figure 12- 1 9 IBM Workload Deployer deployment status 


12.6 Viewing the deployed application 

When the deployment is complete, view the instance information in the user interface and 
then access the application by completing the following steps: 

1 . Check the Sample instance information. 

a. Click Instances -» Virtual Applications. 

b. Click Sample in the list of virtual application instances. 

c. View the details of the deployed virtual application in the Virtual Application Instances 
palette. The details include a list of middleware and virtual machines provisioned on 
the cloud infrastructure for that deployment, and also the deployed history 

(Figure 12-20). 



Figure 12-20 IBM Workload Deployer sample instance information 
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2. Check the results of the Sample instance. 

a. In the right side of palette in Figure 12-20 on page 300, find the row containing 
Hello_Plugin-HVM-nu/T7ber in the virtual machine list (Figure 12-21). 


- Virtual machine perspective (2 in total) 




Name 

Public IP 

VM Status 

Started on 

Role Status 

Hello_Center_ 

Plugin-hcenter. 

11320437709076 

172.16.39.229 

Running lUl <*■ Log 

Nov 4, 2011 4:15:20 PM 

HelloCenter Ul 

Hello Plugin-HVM. 
11320437709096 

172.16.39.228 

Running lu| * Log 

Nov 4, 2011 4:15:20 PM 

hello U 


Figure 12-21 Virtual machine of the Sample instance 

b. Click the Log link to the right of the “Running” status and a new tab opens 
(Figure 12-22). 



Figure 12-22 IBM Workload Deployer Log Viewer 


c. In this log page, from the root, browse to the following entry (Figure 12-22). 

IWD Agent > . . ./logs/Hello_Plugin-HVM. number. hello” > console.log 

d. Click console.log to open the log. You should see the following messages indicating 
that the communication between Hello Plugin and Hello Center Plugin was successful. 

[2011-11-04 20:22:23,003] Hel lo/HCenter/changed.py 47035610148032 pi d=17743 
INFO Send the request to get a greeting message from Joe to Sherry 
[2011-11-04 20:22:23,053] Hel lo/HCenter/changed.py 47035610148032 pi d=17743 
INFO Receive the meesage from hello center: Joe, a kind greeting message 
from Sherry has been sent out. 
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Managing virtual applications 

Each deployment of a virtual application pattern represents a running virtual application 
instance in the cloud environment. You can monitor and manage deployed virtual application 
instances from the Virtual Application Console. This chapter describes how to manage virtual 
application instances from the Virtual Application Console. 

This chapter contains the following topics: 

► Starting the Virtual Application Console 

► Monitoring the virtual machines 

► Monitoring the middleware 

► Viewing the virtual machine logs 

► Performing maintenance operations 


© Copyright IBM Corp. 2012. All rights reserved. 
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13.1 Starting the Virtual Application Console 


Management tasks for a virtual application instance are performed from the Virtual 
Application Console. 

To start the console, complete the following steps: 

1 . Click Instances -» Virtual Applications. A list with all running virtual application 
instances are listed. 

2. Select the instance you want to manage. 

3. On the upper right of the window, click the Manage button (Figure 13-1). 

U Stop X Delete |ES> Manage Upgrade Jjf Maintain Q Resume 
Figure 13-1 Manage button 

4. The Virtual Application Console window opens (Figure 13-2). There are three menus to 
select operations from: Monitoring, Logging, and Operation. 



Figure 13-2 Virtual Application Console window 


13.2 Monitoring the virtual machines 

The Virtual Machine Monitoring view is used to monitor the status and performance of the 
virtual machines that hosts the virtual application. The Virtual Machine Monitoring view is 
displayed by default. You can also open it by clicking Monitoring -» Virtual Machine. 

The virtual machines hosting the current virtual application are listed at the left side of the 
window (Figure 13-3). In this example, the sample OSGi virtual application is selected for 
management. There are two virtual machines listed, one that hosts the WebSphere 
Application Server instance and a second that hosts the DB2 database instance. 



Figure 13-3 Virtual machine instance list 


304 IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 




Click the virtual machine you want to monitor, and the following statistics are displayed as 
diagrams on the right side of the window: 

► Memory 

► Network 

► Processor 

► Storage 

The diagrams update to the most recent data automatically. Hovering your cursor over the 
nodes on the diagram displays the detailed data numbers. 

The Memory graph (Figure 13-4) shows the percentage of memory usage in the 
virtual machine. 


Memory 



^■Used Percentage 


Figure 13-4 Virtual Machine Monitoring: Memory 


The Network graph (Figure 13-5) shows network usage in terms of megabytes transmitted 
and received per second. 


Network 



Megabytes Transmitted per Second -^-Megabytes Received per Second 


Figure 13-5 Virtual Machine Monitoring: Network 
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The Processor graph (Figure 13-6) shows the percentage of processor in usage. 


Processor 



♦Used Percentage 

Figure 13-6 Virtual Machine Monitoring: Processor 

The Storage graph (Figure 13-7) shows the number of blocks of data read and written 
per second. 

Storage 



♦Blocks Read per Second ♦Blocks Written per Second 


Figure 13-7 Virtual Machine Monitoring: Storage 


13.3 Monitoring the middleware 

The Middleware Monitoring view is used to monitor the status and performance of the 
middleware layer that hosts the virtual application. To open the Middleware Monitoring view, 
click Monitoring Middleware. 
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The middleware instances for the current virtual application are listed at the left side of the 
window (Figure 13-8). In this example, there is one WebSphere Application Server instance 
that hosts the OSGi application. 



Middleware Monitoring 


OSGi_Application-was. 11319809228583. WAS jj 

Figure 13-8 Middleware instance list 

Click the middleware instance you want to monitor to see the following statistics displayed as 
diagrams on the right side of the window: 

► WebApplications Request Count 

► WebApplications Service Time 

► Transaction Manager 

► JDBC Connection Pools Wait Time 

► JDBC Connection Pools Used 

► JVM Runtime Heap Size 

► JVM Used 

► Enterprise Beans Method Response Time 

► Enterprise Beans Pooled Count 

► JCA Connection Pools Wait Time 

► JCA Connection Pools Used 

The diagrams update to the most recent data automatically. Hover your cursor over the 
nodes on the diagram, and the detailed number is shown. 

The WebApplications Request Count diagram (Figure 13-9) shows the number of requests 
received for the web application. 


WebApplications Request Count 



♦Request Count 


Figure 13-9 Middleware monitoring: WebApplications Request Count 
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The WebApplications Service Time diagram (Figure 13-10) shows statistics on the service 
time for the web application. 


WebApplications Service Time[ms) 



♦Max Service Time ♦Min Service Time ♦Avg Service Time 
Figure 13-10 Middleware Monitoring: WebApplications Service Time 

The JVM Runtime Heap Size diagram (Figure 13-11) shows the JVM heap size and memory 
usage over a span of time. 

JVM Runtime Heap Size(M) 



Used Memory ♦Heap Size 


Figure 13-11 Middleware Monitoring: JVM Runtime Heap Size 
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The JVM Used diagram (Figure 13-12) shows the amount of JVM heap used. 


JVM Used(M) 



♦JVM Heap Used 


Figure 13-12 Middleware Monitoring: JVM Used 


13.4 Viewing the virtual machine logs 

Logging is important for determining system health and for troubleshooting. This section 
describes how to view and download log files in the Log Viewer of the Virtual 
Application Console. 

Complete the following steps: 

1 . Select Logging at the top of the console. 

2. The logs are displayed as a navigation tree on the left side of the window (Figure 13-13). 
The logs are organized by virtual machine. In this example, there are two virtual machines 
for the virtual application. 



Figure 13-13 Virtual Application logging tree 


3. For each virtual machine, logs are organized in to three categories: OS (operation 
system), Middleware (database, application server, and so on), and IBM Workload 
Deployer Agent. Expand the navigation tree to get the full list of log files. 
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4. Click the log file you want to display and the log file content is retrieved from the virtual 
machine and displayed on the right side of the window (Figure 13-14). 


+ Database-db2.113198092285c 

OSGi_Application-was.ll3198C 

S 9 OS 

□ a WAS 

- B .../logs/serverl 

native_stderr.log 

SystemOut.log 

SystemErr.log 

native_stdout.log 

- C? .../logs/ffdc 

FfdcSummary.txt 


[10/28/11 13:56:11:120 UTC] Appli cati onMg A WSVR0204 

Appl i c at i on : F er fS er vl e t App . e er Appl i c at i on bui 1 d 1 aval : Uhkno 
[10/28/11 13:56:11:428 UTC] 0000000a EJBContainerl I CHTR0167 
server is binding the com. ibm. websphere, scheduler. User Calendar H 
interface of the DefaultUser Calendar enterprise bean in the Cal 
module of the S che dul erC al endar s application. The binding loca 
c om/ i bm/w eb spher e/ s che dul er / c al endar /D e f aul tU s er C al endar Horn e 

[10/28/11 13:56:11:465 UTC] webapp I 

com. i bm . w s . w eb c ont ai ner . w eb app . W ebGr ouplmpl W ebGr oup SRVE0 1 691 : 
Web Module: per f servlet. 

[10/28/11 13:56:11:561 UTC] WASSessi onCor I 

Sessi onContextRegi stry getSessi onContext SESH01T6I: Will create 
session context for application key default_host/wasFerfTool 

[10/28/11 13:56:11:575 UTC] webcontainer I 

com. i bm . w s . w eb c ont ai ner . Vi r tualHo s tlmpl addW eb Appl i c at i on SRVE0 
Module u erf servlet has been bound to 


Figure 13-14 Virtual Application logging example 


5. Select the Auto-refresh check box (Figure 13-15) if you want the log file content 
automatically refreshed. 



Figure 13-15 Log automatically refreshed 


6. If you want to download all the log files in a single operation, click the Download All 
button. Log files for each virtual machine are packaged into one compressed file. In this 
example, Database-db2.11319809228593.zip and 
OSGi _Appl i cation-was . 1 1319809228583. zi p are created. 


If you want to download a single log file, hover your cursor over the file name and click the 
Download icon (P^l) (Figure 13-16). 



Figure 13-16 Download a single log file 
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For more information about troubleshooting, see Chapter 15, “Troubleshooting” on page 349. 


13.5 Performing maintenance operations 

You can submit maintenance operations from the Virtual Application Console Operation 
menu, including: 

► Setting the trace level for an IBM Workload Deployer agent process on the 
virtual machines 

► Updating the database access configuration 

► Updating parts of WebSphere Application Server configuration, collecting trace logs for 
troubleshooting, and installing interim fixes to WebSphere Application Server 

► Adding, removing, or updating the SSH public key on virtual machines 


13.5.1 Setting the trace level for an agent process 

You can set the runtime trace level in the Agent process running on the virtual machine. This 
setting is available for debugging purposes with the IBM Workload Deployer agent. To set the 
trace, complete the following steps: 

1 . On Virtual Application Console, select Operation. 

2. The Operations window opens. Select AGENT from the list. 

3. Expand Set the trace in the agent process on the virtual machine (Figure 13-17). 


- Set the trace in the agent process on the virtual machine 

_ Set the trace on the agent that is running on the virtual machines in this 
Description: S y S t em for debugging purposes 

Trace string that will be applied to the 
agent: 


Submit 


Figure 13-17 Set the trace level in the agent process 

4. In the Trace string that is applied to the agent field, enter the trace level you want to 
change to. 

The trace levels in ascending order of severity are: 

- FINEST 

- FINER 

- FINE 

- INFO 

- WARNING 

- SEVERE 

You can also set the trace to OFF to stop the trace. 

In this example, enter FINEST. 

5. Click the Submit button. 


FINEST 

A 
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The operation is submitted and executed. After it is complete, the results are shown at the 
bottom of window (Figure 13-18). 


Operation Execution Results 


.* 


A 


Set the trace in 
the agent 
process on the 
virtual machine 


Done 

& 


Nov 4 , 2011 
3:18:12 PM 


Database- OSGi_Application- 

db2.11319809228593.AGEN' was.ll319809228583.AGENT: 


Success 

QSGi_Application- 

was.11319309223583.AGEN 

Success 


Successfully set Agent trace leve 
FINEST 

Database-db2. 11319809228593 
Successfully set Agent trace leve 
FINEST 


Figure 13-18 Results of set trace level in an agent process 


The trace results can be seen in the log viewer. 


13.5.2 Updating a database access configuration 

When a virtual database is deployed, two users are created by default: AppUser and 
AppDBA. Initial passwords are created randomly for these two users. 

Querying passwords 

The initial passwords for the default database user IDs can be queried in the following ways: 

► To see the passwords for a database created in a virtual application pattern, click 

Instances -» Virtual Application. 

Select the virtual application instance and expand the Middleware perspective section or 
the Virtual machine perspective section. Click Endpoint next to DB2, and the password 
string is displayed (Figure 13-19). 


Endpoint information 

AppUser ENDPOINT: 

jdbc:db2i//172. 16.39.225 :50000/mydb:user=appuser;password=iuZ95bD'TD5Dhlb4ASq3; 
AppDBA ENDPOINT: jdbc:db2://172.16.39.225:50000/mydb:user=appdba;password=admin; 


- Middleware perspective (2 in total) 

► WAS (0SGi_Ap plication- was] Q Endpoint 

► DB2 (Database-db2) Q Endpo 

Figure 13-19 Query user password for database in a virtual application 
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► To see the passwords for a database created in a database pattern, click Instances 
Databases. Select the database instance, then on the right side of the window, you see 
the user IDs. Click Show next to the password you want to see (Figure 13-20). 


User (Application DBA) 

User (Application DBA): 

appdba 


Password (Application DBA): 

CnPEv65WHB5tbIwsN 

Hide ^, 

JDBC URL (Application DBA): 


Show 

User (Application User) 

User (Application User): 

appuser 


Password (Application User): 


Show 

JDBC URL (Application User): 


Show 


Figure 13-20 Query user password for a virtual database 


Updating passwords 

You can update the password for the default user IDs. To change a password, complete the 
following steps: 

1 . Open the Virtual Application Console and click Operation. 

2. In the Operations window, select DB2. 

3. Expand the Update configuration section (Figure 13-21). 


J Update configuration 

Description: Updates the parameters of this role dynamically 

Application User Password: * 

Application DBA Password: * ***** 


Allow SSH access for Application User: 


Allow 

Deny 


Allow SSH access for Application DBA: 


Allow 

Deny 


Submit 


Figure 13-21 Update DB2 configuration 


4. From this window, you can change the existing password, or update the SSH access 
configuration. When you are finished, click Submit. 
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The operation is submitted and executed. The results are shown at the bottom of the window 
(Figure 13-22). 


Operation Execution Results 

* X 


Name 

Status 

Created Time ▼ 

Result 

Update configuration 

Done 3f 

Nov 3, 2011 3:27:14 
PM 

Database- 

db2.11320697453196.DB2: 

Success 


Figure 13-22 Update DB2 configuration result 


13.5.3 Updating a WebSphere Application Server configuration 

There are several update options for the WebSphere Application Server instance that can be 
performed from the Virtual Application Console. To make the updates, complete the 
following steps: 

1 . Open the Virtual Application Console for the virtual application instance and 
click Operation. 

2. In the Operations pane on the left of the window, select WAS. 

3. On the right side of the window, expand the Update configuration section 
(Figure 13-23). 


H Update configuration 

Description: The operation will update the parameters under this role dynamically. 

WAR/EAR File: 

artifacts/EBA applicatic 

[ Browse ]( Delete 

Admin User Password: 





Enable Verbose Garbage Collection: * 

□ 

Async response timeout (sec]: 

120 

Total transaction lifetime timeout (sec]: 

120 

Maximum transaction timeout (sec]: 

300 

Client inactivity timeout (sec]: 

60 

Log Detail Levels: 

*=info 

Generic JVM arguments: 

1 

Depends Role: Database- db2,DB2 



Maximum Connections: * 

50 

1 

Connection timeout: * 

180 

1 

Submit 




Figure 13-23 Update the WebSphere Application Server configuration 


From this window, you can make the following configuration changes to WebSphere 
Application Server: 

- Update the WAR / EAR file deployed on this WebSphere Application Server instance. 

- Set a new password for the WebSphere Application Server administrator. 

- Enable or disable verbose garbage collection. 

- Change the log level. This change is persistent and requires a server restart to 
take effect. 

- Set generic arguments to Java Virtual Machine. 
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- Optimize performance by tuning transaction parameters. 

- Update database connection settings, such as maximum connections and 
connection timeout. 

4. Make the change and click Submit. 

The operation is submitted and executed. The results are shown at the bottom of the window 
(Figure 13-24). 


Operation Execution Results 't :i 

X 



; Name 

■ ll 

; Status Created 
! Time 

Result 

Return 

Value 

* 

Update 

configuration 

Done» Nov8 ' 2011 
Done bff 1 q I 22:55 AM 

QSGi Application- 
's. 11320697458186. WAS: Success 

✓ 




Figure 13-24 Update the WebSphere Application Server configuration result 


13.5.4 Collecting trace logs for WebSphere Application Server 
troubleshooting 

For troubleshooting purposes, you can enable a trace setting for WebSphere Application 
Server. This setting is enabled dynamically but does not survive a server restart. The output 
can be seen from the log viewer. To complete these actions, complete the following steps: 

1 . Open the Virtual Application Console for the virtual application instance and 
click Operation. 

2. In the Operations window, select WAS from the list. 

3. In the Trouble Shooting window, expand the Set WebSphere Application Server trace 
level dynamically section (Figure 13-25). 


T Trouble Shooting 


Set WebSphere Application Server trace level dynamically 


The operation sets the trace level of the WebSphere Application Server. For example: 

. _ *=INFO:com. ibm. websphere. K =FINEST. You can use trace logs to assist you in monitoring 

Description: S y S £ em performance and diagnosing problems. This setting is dynamic and does not restart 
the server. Use the update configuration if you need a server startup trace. 


Trace String: 


*=INIFO:com.ibm.websphere*=HNEST 




Submit 


Figure 13-25 Set the WebSphere Application Server trace level dynamically 


4. In the Trace String field, enter the trace string. In this example, we enter 

*=INFO:com.ibm.websphere.*=FINEST. Click Submit. The trace string is normally 
supplied by IBM Support. 
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The operation is run and the results are shown at the bottom of the window (Figure 13-26). 


316 


Operation Execution Results '% X 

r i 

; Name ^ ; Status 

Created 

Time 

Result 

Return Value 

Set WebSphere 
Application Done 

Server trace @T 

level dynamically 

Nov 8, 
2011 
2:54:04 
PM 

QSGi Application 
was.ll3206974f 
Success 

GSGi Application- 

was. 11320697453136. WAS: WebSphere 

Application Server set trace 

level :*=INFO:com.ibm. websphere. 1 =FINEST 


Figure 13-26 Set WebSphere Application Server result 


Trace levels: The trace level you set takes effect dynamically and does not require a 
server restart. If you want to change the trace server startup, see 13.5.3, “Updating a 
WebSphere Application Server configuration” on page 314. 


5. To download WebSphere Application Server logs from the Trouble Shooting window, 
expand the Get logs section and click Submit (Figure 13-27). 


T Trouble Shooting 

(+J Set WebSphere Application Server trace level dynamically 
(*J Generate javacore 

1 + \ Generate a Heap Dump for memory analysis 

[+| Generate a System Dump for detailed process analysis 

0 Get logs 

Description: Get logs on server. 

Submit 

Figure 13-27 Get logs on WebSphere Application Server 

The operation is executed and the results are shown at the bottom of window 
(Figure 13-28). 


<* 


Operation Execution Results 


Name ▼ 

Status Created 
Time 

Result 

Return Value 

Get logs 

Nov 8, 

Done 2011 
ST 3:03:18 

PM 

QSGi_Application OSGi_Application- 

was.H3206974f was. 11320697458186. WAS: was_logs.zip 
Success 1% 


Figure 13-28 Result of get logs on WebSphere Application Server 
6. In the Operation Execution Results window, in the Return Value column, click the 


Download icon ( [%) to download the log files. 


IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 






You can also generate other files to assist you in monitoring system performance and 

diagnosing problems: 

► Generate javacore: This operation generates two Java core memory dumps of the 
WebSphere Application Server. The memory dumps are generated 1 minute apart to aid 
in troubleshooting. 

► Generate a Heap Dump for memory analysis: Generate a Heap Dump for analysis of Out 
of Memory or other memory-related conditions. 

► Generate a System Dump for detailed process analysis: Generate a system memory 
dump for analysis of the process. 

Complete the following steps to generate javacore files. The steps to generate heap memory 

dump and system memory dump are similar. 

1 . From the Trouble Shooting window, expand the Generate javacore section, and click 
Submit (Figure 13-29). 


T Trouble Shooting 

>| Set WebSphere Application Server trace level dynamically 
0 Generate javacore 

The operation will generate two java core dumps of the WebSphere Application Server. The 
Description: dumps will be generated one minute apart to aid in troubleshooting. 

Submit 

Figure 13-29 Generate javacore 


2. Figure 1 3-30 shows the results of the operation. In the Return Value column, click the 
Download icon (lip to download the log files. 


Operation Execution Results % X 

Name ▼ 

Status Created 
Time 

1 T 

Result : Return Value : 

Generate 

javacore 

Nov 8, 

Done 2011 
ST 2:31:17 

PM 

QSGi Application OSGi_Application- 
was.ll3206974f was. 11320697458 186. WAS: 
Success debug_javacores.zip ^ 


Figure 13-30 Result of generate javacore 


13.5.5 Installing an interim fix to WebSphere Application Server 

To apply an interim fix to WebSphere Application Server, download the interim fix from the 
IBM support site, upload the file to IBM Workload Deployer, and then apply it to the virtual 
machine instance. These instructions assume that you downloaded the emergency fix to your 
local server. 
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Complete the following steps: 

1 . In the IBM Workload Deployer user interface, click Catalog -» Emergency Fixes 
(Figure 13-31). 


Catalog 


Reports 


System 


Reusable Components 
Virtual Application Templates 

Virtual Images 
Virtual Appliances 
Script Packages 
Add-Ons 



Database Tools 
Workload Standarc 


These fixes enable a script package to be 
uploaded and applied to virtual images. For 
security reasons, only .zip files, .tgz files and .pak 
files can be uploaded. Three levels of severity are 
assignable to each fix: Normal, Critical, and 
Required. 


Figure 13-31 Emergency fixes menu 


2. Click the New icon (c£) to add a new emergency fix (Figure 13-32). 



Figure 13-32 Add new emergency fix 

3. In the dialog box that opens, enter a unique name in the Emergency fix name field. In this 
example, 8.0.0.1-WS-WASND-IFPM45320 is entered as the name of the fix 
(Figure 13-33). 


Describe the emergency fix you want to load into the catalog. 


* Emergency fix name: 8.0.0. 1-WS-WASND-IFPM45320 

Description: A detailed description 


OK | I 1 Cancel 


Figure 13-33 Emergency fix dialog box 
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4. Click OK to add the fix to the list. 

5. Click the input field in the Emergency fix files section, browse to the fix file downloaded 
from IBM support, and then click Upload (Figure 13-34). 


Emergency Fixes 

# 3.0.0. 1-WSWASND 

IFPM45320 

% X 

Search... 

Description: 

None provided 

8.0.0. 1-WS-WASND-IFPM45320 

Created on: 

Dec 28, 2011 7:20:15 AM 


Updated on: 

Dec 28, 2011 7:20:15 AM 


Emergency fix files: 

8.0.0. 1-WS-WASND-IFPM4532 



Upload , 




4 

j 



There are no files for this script 



package. 



Access granted to: 

Administrator [owner] 


Figure 13-34 Upload emergency fix file 


When you see a message that the file was successfully uploaded, click the Refresh icon 
(f^|) to refresh the page. You see a message below the Upload button that indicates the 
content of the fix package (Figure 13-35). 


3.0.0. 1-WS-WASND 

-IFPH45320 % 

X 

Description: 

None provided 


Created on: 

Dec 28, 2011 7:20:15 AM 


Updated on: 

Dec 28, 2011 7:24:41 AM 


Emergency fix files: 

Browse... 

Upload 

The script package is in 8.0.0. 1-WS-WASND- 
IFPM45320.zip. 11^ Download 


Access granted to: 

Administrator [owner] 
Add more... 


Severity: 

Normal v 


Applicable to: 

Add more... 



Figure 13-35 Fix file is ready for download 
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6. Click in the Applicable to input field and a list of virtual images is displayed that you can 
select from (Figure 13-36). You can also type in the field to filter out virtual images with 
specific name. 


Applicable to: 



WebSphere Application Server 

|+J Comments 

8.0. 0. 1, SLES (Novell SUSE Linux 
Enterprise Server 11), 11 
WebSphere Application Server 8.0.0. 1 
with Intelligent Management Pack 

7. 0. 0. 2, SLES (Novell SUSE Linux 
Enterprise Server 11), 11 

IBM Workload Deployer Image forx86 
Systems 1.0. 0.2, Red Hat Enterprise 
Linux 64-Bit (RHEL 5.7 X64), 5.7 
IBM OS Image for AIX Systems 1.0, 

AIX (IBM AIX 6100-05), 6100-05 
IBM OS Image for AIX Systems - Tiny 

1.1, AIX (IBM AIX 6100-05), 6100-05 

IBM OS Image for AIX Systems - Small 


Figure 13-36 Applicable to list 


7. Select the virtual images the emergency fix is installed to. In this example, IBM Workload 
Deployer Image for x86 Systems, Red Hat Enterprise Linux 64-Bit (RHEL 5.7 X64) is 
selected (Figure 13-37). 


Applicable to: 

IBM Workload Deployer Image for x86 Systems, RedHat 
Enterprise Linux 64-Bit (RHEL 5.7 X64) [remove] 


Add more... 


Figure 13-37 Select virtual image 


8. Open the Virtual Application Console for the virtual application image. Click Operation 
and then select WAS from the list on the left. 

9. In the Trouble Shooting window, expand Install WebSphere Application Server 
Updates (Figure 13-38). 


Install WebSphere Application Server Updates 

Description: Install updates or interim fixes to WebSphere Application Server 


Interim fixes URL: 


Submit 

Figure 13-38 Install WebSphere Application Server Updates 


Click select button to update 


Select ▼ 


b 


Trouble Sh 


ooting | 
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1 0.CIick the Select button and you see the interim fix in the list. Check the box to select it 
(Figure 13-39). 


- Install WebSphere Application Server Updates 

Description: Install updates or interim fixes to WebSphere Application Server 



Figure 13-39 Select the interim fix 


1 1 .Click Submit. From the Operation Execution Results window, you see that the operation 
is submitted and in progress. It might take a while to apply the interim fix to WebSphere 
Application Server (Figure 13-40). 


Operation Exe 

Name 

icution Results 

Status Created ▼ 

Time 

X 

Result 

Return Value 

Install 

WebSphere Active 

Application iJ 

Server Updates 

Web Application- 

was. 11320692053507. WA 
4:30:27 PM pendjng q 


Figure 13-40 Interim fix installation is in progress 


12. When the process is complete, you see a message in the Operation Execution Results 
window (Figure 13-41). 


Name 

Status 

Created 

T 

Result 

Return Value 



Time 





Operation Execution Results 


X 


Install 

WebSphere Done 

Application (2T 

Server Updates 


Nov 1 , 2011 
4:30:27 PM 


Web_Application- 

was. 11320692053507. WA 

Success 


Figure 13-41 Interim fix installation result 


13.5.6 Adding, updating, or removing a virtual machine SSH public key 

You can connect to a virtual machine that hosts a virtual application using SSH. If there is no 
SSH key installed on the virtual machine at deployment time, or if you want to replace the 
current public key, complete the following steps: 

1 . Open the Virtual Application Console for the instance. 

2. Select the Operation tab, and then select SSH from the list on the left. 
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3. Expand Add or update VM SSH public key (Figure 13-42). 


H Add or update VM SSH public key 

_ Provide SSH public key for IWD administrative user access to 
Description: deployment VMs. If a key is already present, it will be replaced. 


ssh-rsa * 

Public Key : Aafl s df a A2 B 3 Nza C 1 y c2 EAAAAD AQABA T 
AAB AQCZM Vqsfa g F Lfb dS U 9 a d s RTJ i F ^ 


Submit 


b 


±] Remove VM SSH public keys 


Figure 13-42 Add or update a VM SSH public key 


4. In the Public Key field, enter the string of your SSH public key and click Submit. 

5. A confirmation window opens and asks you to confirm the operation. Click Yes 
(Figure 13-43). 


Confirm 

Are you sure? If a public key already exists on the VM for this user, it will be replaced. 

: Yes ^ No 

Figure 13-43 Confirm adding / updating the SSH public key 

6. The operation is executed and the results are shown at the bottom of the window 
(Figure 13-44). 


Operation Execution Results 

X 

; Name 

; Status 

Created ▼ 

Time 

Result Return Value 

Add or update 
VM SSH public 
key 

Done ST 

Nov 7, 2011 
3:14:19 PM 

Database-db2. 11320695434485. SSH: 
Success 

OSGi_Application-was.11320695434466.SSH: 
Success V 


Figure 1 3-44 Add / Update SSH public key result 


Multiple virtual machines: If there are multiple virtual machines hosting this virtual 
application, then the SSH public key is added / updated to all virtual machines. You see 
the results for each virtual machine in the execution result window. 


7. You can connect to the virtual machine using your private key file. You can clear an SSH 
public key from a virtual machine by completing the following steps. 

Important: All installed SSH public keys are cleared from all virtual machines hosting 
this virtual application. 

8. On Virtual Application Console, click Operation and select SSH from the list on the left. 
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9. Expand Remove VM SSH public keys (Figure 13-45) and click Submit. 


*} Add or update VM SSH public key 
Remove VM SSH public keys 

^ Clear all SSH public keys for the IWD administrative user from the 

Description: deployment VMs 

Submit^ 

Figure 13-45 Remove SSH public keys 

10. A confirmation window opens and asks you to confirm the operation. Click Yes 
(Figure 13-46). 


Confirm 

Are you sure you want to clear all SSH public keys for the IWD admin user? This will effectively 
disable SSH access if password-based authentication is already disabled. 

1 Yes ^ No 

Figure 13-46 Confirm removing the SSH public keys 

The operation is executed and the results are shown at the bottom of the window 
(Figure 13-47). 


Operation Execution Results % X 


; Name 

; Status 

Created 

Time 

Result 

Return 

Value 

* 

Remove VM 
SSH public 
keys 

Done & 

Nov 3, 2011 
11:39:39 AM 

Database-db2. 11320697458196. SSH: 
Success ^ 

OSGi_Application- 

was. 11320697458186. SSH: Success V' 




Figure 13-47 Remove the SSH public key result 
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Managing virtual applications 
from the command-line interface 


IBM Workload Deployer supports a command-line interface (CLI) that provides an interpreted 
Jython scripting environment, allowing you to manage the appliance from a remote machine. 
This chapter describes how to use the CLI to create and manage virtual applications. 

This chapter contains the following topics: 

► Starting the command-line interface 

► Creating and deploying a virtual application 

► Cloning a virtual application 

► Downloading an application model compressed file 

► Deleting a virtual application 

► Managing virtual application instances 

► Monitoring a virtual application 

► Downloading middleware log files 

► Adding, updating, and removing the SSH public key 

► Terminating and deleting a virtual application instance 


© Copyright IBM Corp. 2012. All rights reserved. 
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14.1 Starting the command-line interface 


To use the CLI, you must first download the tool from the IBM Workload Deployer web 
interface to a Windows or Linux operating system and install it. Then connect to the host 
where IBM Workload Deployer is running. 

Complete the following steps: 

1 . On the IBM Workload Deployer web interface, click the Welcome tab. 

2. On the Welcome window, find the Download command line tool link (Figure 14-1). 


IBM Workload Deployer 


JL Administrator | © Help | About | Logout 


*22 


IBM Workload Deployer 


Setting up your private cloud 


Download IBM Image Construction 
and Composition Tool 


vjv Download IBM Workload Plugin 
- Development Kit 


Download command line tool 

h 


Figure 14-1 Download the command-line tool 


Click the link, and download and save the command-line tool on your Windows or Linux 

operating system. In this example, it is saved as 

D:\deployer.cli-3. 1.0. 0-20111109092022. zip on a Windows system. 

3. Extract the compressed archive. In this example, extract it to the 

D:\deployer. cli-3.1.0.0\ folder, which is referred as <CLI_R00T> in following steps. 

4. Open a command-line window and go to <C LI _R00T>\dep'\ oyer .cM\bin (Figure 14-2). 


D:\deployer.cl i -3 . 1.0. 0\depl oyer. cl i \bi n> 
Figure 14-2 Go to the extracted folder 


5. There are three ways to run a command using the IBM Workload Deployer CLI: 

- Interactive mode: 

deployer -h <H0ST_NAME> -u <USER_ID> -p <PASSW0RD> 

- Immediate mode: 

deployer -h <H0ST_NAME> -u <USER_ID> -p <PASSW0RD> -c <C0MMAND> 

- Script file mode: 

deployer -h <H0ST_NAME> -u <USER_ID> -p <PASSW0RD> -f <JYTH0N_SCRIPT_FILE> 
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In this example, commands are run in interactive mode. The following command is used to 
start the CLI console shown in Figure 14-3: 

deployer -h 172.16.66.188 -u cbadmin -p cbadmin 


D:\deployer. cl i -3 . 1 .0.0\depl oyer . cl i\bin> deployer -h 172.16.66.188 -u cbadmin -p 
cbadmi n 

Welcome to the IBM Workload Deployer CLI. Enter 'help' if you 
need help getting started. 

»> 


Figure 14-3 Start the CLI in interactive mode 
6. If you are new to the CLI, run help to see the information in Figure 14-4. 


D:\deployer. cl i -3 . 1 .0.0\depl oyer . cl i\bin> deployer -h 172.16.66.188 -u cbadmin -p 
cbadmi n 

Welcome to the IBM Workload Deployer CLI. Enter 'help' if you 
need help getting started. 

»> help 

The CLI provides an interpreted Jython scripting 
environment that enables you to manage the appliance from a 
remote machine. 

All of the interactive help information provided by the CLI is also 
available at: 

http : //publ i b . boulder . i bm. com/i nfocenter/worl odep/v3rlm0/i ndex . j sp 

The CLI assumes you have some familiarity with 
version 2.5.1 of the Python language. If not, there are many 
sources of information available in both printed form and on 
the web. 

The CLI can run in both interactive and batch modes. 

For more information on how to invoke the CLI, specify the --help 
parameter to the deployer or deployer.bat command. When run in 
interactive mode, the CLI supports command editing 
and command history using both the arrow keys and a subset of the 
standard emacs Unix shell key bindings. 

In addition to the standard Jython libraries, the 
CLI provides a rich set of functions and classes in the deployer 
package to help you manage your appliance. More extensive 
help is available for the deployer package by entering: 

»> help (deployer) 

Note that help is a Jython function that accepts a single optional 

parameter. When it is invoked with no parameters, this help message 

is displayed. When passed a parameter as in the preceding example, help displays the 

help information for the specified object, method or 

property. 

»> 


Figure 14-4 CLI help 
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7. If you need more detailed help for a specific command, enter: 
i\e1p(SPECIFIC_0BJECT) 

Some frequently used help commands are listed in Table 14-1. 


Table 14-1 Useful help commands 


Command 

Description 

help (deployer) 

The deployer package provides functions and 
objects to help you manage the appliance. 

hel p (depl oyer . hypervi sor) 

The Hypervisor object represents a particular 
hypervisor defined on the appliance. Use the 
Hypervisor object to query and manipulate the 
hypervisor definition on the appliance. 

help (deployer. cloud) 

A Cloud object represents a particular cloud group 
defined on the appliance. Use the Cloud object to 
query and manipulate the cloud group definition on 
the appliance. 

hel p (depl oyer . vi rtual machi ne) 

A VirtualMachine object represents a particular 
virtual machine defined on the appliance. Use the 
VirtualMachine object to query and manipulate the 
virtual machine definition on the appliance. 

hel p (depl oyer .virtual system) 

A VirtualSystem object represents a particular 
virtual system defined on the appliance. Use the 
VirtualSystem object to query and manipulate the 
virtual system definition on the appliance. 

hel p (depl oyer . vi rtual appl i cation) 

A VirtualApplication object represents a particular 
virtual application instance defined on the 
appliance. Use the VirtualApplication object to 
query and manipulate the virtual application 
instance definition. 

hel p (depl oyer . database) 

A Database object represents a particular database 
instance defined on the appliance. Use the 
Database object to query and manipulate the 
database definition. 

hel p (depl oyer . pattern) 

A Pattern object represents a particular pattern 
defined on the appliance. Use the Pattern object to 
query and manipulate the pattern definition on the 
appliance. 

help (depl oyer. appl i cation) 

An ApplicationPattern object represents a particular 
virtual application pattern defined on the appliance. 
Use the ApplicationPattern object to query and 
manipulate the virtual application pattern definition. 

hel p (depl oyer.pl ugin) 

A Plugin object represents a particular plug-in 
defined on the appliance. Use the plug-in object to 
query and manipulate the plug-in definition. 

hel p (depl oyer . patterntype) 

A PatternType object represents a particular pattern 
type defined on the appliance. Use the PatternType 
object to query and manipulate the pattern type 
definition. 
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14.2 Creating and deploying a virtual application 


In this section, we create one Java EE web application from CLI. This application contains 
two components, an enterprise application component that hosts a Java EE web application, 
and a database component. The artifacts used for this example are: 

► EAR file: tradelite. ear 

► Database setup script: setup_db. sql 

The attributes of the virtual application are described in two JSON files: 

► appmodel . json 

► appmodel_l ayout. json 


14.2.1 Application model 

The appmodel .json file describes the model and layer definition of the virtual application 
(Example 14-1). 

Example 14-1 appmodel. json 

{ 

"layers": [{ 

"nodes": ["appl ication" , "database"] , 

"id": "1 ayer_l" , 

"name" : "1 ayer_l" 

}]. 

"model " : { 

"name" : "Sampl eAppByCLI " , 

"description": "Sample Java EE web application created from CLI.", 
"patterntype" : "webapp", 

"version" : "2.0" , 

"app_type" : "appl i cati on" , 

"nodes": [ 

{ 

"id": "application", 

"type": "EAR", 

"attributes" : { 

"WAS_Version" : "7.0", 

"archive" : "arti facts/tradel i te.ear" 

} 

}. 

{ 

"id" : "database" , 

"type" : "DB2" , 

"attributes" : { 

"dataSizeForWorkload" : 1, 

"sqlType":"DB2", 

"dbname" : "mydb" , 

"dbSQLFi le" : "arti facts/setup_db.sql ", 

"purpose" : "production" 

}. 

"groups" : { 

"cl oneApproach" : fal se, 

"workl oadStandardApproach" :true 

} 
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"links": [{ 

"id" : "appl i cati on. database" , 

"type" : "WASDB2" , 

"source" : "appl i cati on" , 

"target" : "database" , 

"annotation":" ", 

"attributes" : { 

"connecti onTimeout" : 180, 
"nontransactional " :fal se, 

"maxConnecti onPool " : 10, 

"resourceRefs" : [ 

"tradel i te.warljdbc/TradeDataSource" 

] 

} 

}] 

} 

} 


► In the layers section, you can see there is only one layer in this application. Both the 
application and database nodes are on this layer. (Layers are described in 8.2.6, 
“Reference layering” on page 205.) 

► The model section defines: 

- The name of the application (Sampl eAppByCLI). 

- The patterntype of the application (webapp). 

- The version of pattern type (2.0). 

► A node is defined with an ID of application: 

- The type of artifact is EAR. 

- The archive of the artifact is artifacts/tradelite.ear. 

The artifacts folder is created and the artifacts are stored in it when you package the 
virtual application 

► A node is defined with an ID of database: 

- The type of the artifact is DB2. 

- The dbname field indicates that the name of the database is mydb. 

- The dbSQLFile field indicates that the script used to set up the database is 
artifacts/setup_db.sql . 

- The sqlType field indicates that the type of the script is DB2. 

► The links section defines the link between the two components: 

- The type of the link is WASDB2. 

- The source of the link is the appl i cation node. 

- The target of the link is the database node. 

- The resourceRefs attribute indicates that this link is a resource reference with the 
name tradel i te.warfjdbc/TradeDataSource. 
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14.2.2 Application model layout 


The appmodel_layout. json file describes the layout information when the components of the 
application are displayed in the Virtual Application Builder window (Example 14-2). 

The ID of the nodes in the model layout file must match the ID of nodes in appmodel .json. 

Example 14-2 appmodeljayout.json 

"tool i ng" : { 

"nodes" :[ 

{ 

"id": "application", 

"location": { 

"x": "lOpx", 

"y": "150px" 

} 

}, 

{ 

"id": "database", 

"location" : { 

"x" : "300px" , 

"y" : "150px" 

} 

} 

]. 

"1 i nks" : [] 

} 

} 


14.2.3 Packaging the application 

Place the two JSON files and all the artifacts in the folder structure shown in Example 14-3. 

Example 14-3 Folder structure of the application 

Q Sampl eAppByCLI 
appmodel .json 
appmodel_l ayout. json 
Ej) artifacts 

tradel ite.ear 
setup_db.sql 


Then compress the whole Sampl eAppByCLI folder into an archive and save it as 
D:\Sampl eAppByCLI . zi p. 


14.2.4 Creating the virtual application 

Enter the following command in the CLI to create the virtual application: 
deployer.appl i cat ions. create ("D:\Sampl eAppByCLI .zip") 
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The attributes are returned (Figure 14-5). 


»> deployer.appl ications.create("D:\SampleAppByCLI .zip") 

{ 

"access_rights" : (nested object), 

11 acl 11 : (nested object), 

|"app_id": “a-aed67a8c-95c6-47d0-9edl-f329fa559055", 
"app_name M : "SampleAppByCLI" , 

"app_type" : "application", 

"artifacts": (nested object), 

"content_md5" : "08AF308A5067023F1A91BBE801DE0AB4" , 
"content_type" : "appl i cati on/json" , 

"create_time" : "2011- 11- 15T15 : 31 : 31Z" , 

"creator": "cbadmin", 

"last_modi tied" : "201 1-1 1-15T15 : 31 : 43Z" , 

"lastjnodi tier" : "cbadmin", 

"patterntype" : "webapp", 

"version": "2.0" 

} 

»> 


Figure 14-5 Create virtual application from the CLI 

When the application is successfully created, an application ID (appjd) is available for the 
application. In Figure 14-5, you can see that the appjd is: 

a-aed67a8c-95c6-47d0-9edl-f329fa559055 

The application object can be accessed using the appjd. For example, the following 
command returns the same information that you see in Figure 14-5: 

depl oyer. appl i cati ons .get ( l, a-aed67a8c-95c6-47d0-9edl-f329fa559055 M ) 

You can also access nested objects. For example, the following command retrieves 
information about the artifacts in the application: 

depl oyer. appl ications.get( l, a-aed67a8c-95c6-47d0-9edl-f329fa559055") .arti facts 
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As you can see in Figure 14-6, the tradel ite.ear and setup_db.sql artifacts were created 
correctly. 


»> deployer.appl i cat ions. get ( M a-aed67a8c-95c6-47d0-9edl-f329fa559055") .arti facts 

[ 

{ 

"accessjn'ghts" : (nested object), 

"application": (nested object), 

"content_md5" : "68C84965B52D8BC66D5DCB7CD0E2B774" , 

"content_type" : "appl i cati on/octet-stream" , 

"create_time" : "201 1-1 1-15T15 : 31 : 38Z" , 

"creator": "cbadmin", 

"1 ast_modi fi ed" : " 201 1 - 1 1 - 15T15 : 3 1 :38Z" , 

"1 astjnodi tier" : "cbadmin" , 

"name": "setup_db.sql " , 

"sharedservice" : (nested object) 

}. 

{ 

"accessjn'ghts" : (nested object), 

"application": (nested object), 

"content_md5" : "9B67F070493B3DC30C314E355CD879B6" , 

"content_type" : "appl i cati on/octet-stream" , 

"create_time" : "201 1- 1 1- 15T15 : 3 1 : 40Z " , 

"creator": "cbadmin", 

"1 ast_modi tied" : " 201 1 - 1 1 - 15T15 : 3 1 :40Z" , 

"1 ast_modi tier" : "cbadmin" , 

"name": "tradel i te. ear" , 

"sharedservice": (nested object) 

} 

] 

»> 


Figure 14-6 Get artifacts of a virtual application 


14.2.5 Deploying a virtual application 

The following command deploys the virtual application: 

depl oyer. appl i cati ons .get ("a-aed67a8c-95c6-47d0-9edl-f329fa559055") .depl oy ("Sample 
AppByCLI Deployment", deployer.clouds[0] , "D:\sshPubKey.txt") 

In this example, the virtual application is deployed with the following parameters: 

► Name of the virtual application instance: Sampl eAppByCLI Depl oyment 

► Deploy to the first cloud group configured in this device: depl oyer, cl ouds[0] 

► The prepared SSH public key for the virtual machines: D:\sshPubKey.txt 
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The attributes of the virtual application instance are returned (Figure 14-7). 


»> deployer.appl i cat ions. get ( M a-aed67a8c-95c6-47d0-9edl-f329fa559055") .deploy( 
"Sampl eAppByCLI Deployment", deployer.clouds[0] , "D:\sshPubKey. txt") 

{ 

"acl": (nested object), 

"app_id" : M a-aed67a8c-95c6-47d0-9edl-f329fa559055" , 

M app_type" : "application", 

"appmodel " : " https:// 172. 16.33. 181: 9444/storehouse/user/depl oyments/ 
d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/appmodel . json" , 

"deployment" : " https:// 172. 16.33. 181 : 9444/storehouse/user/depl oyments 
/d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/depl oyment . json" , 

"deployment name": "Sampl eAppByCLI Deployment", 

| "id": "d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa"' 

"operations": (nested object), 

"rol e_error" : False, 

"start time": "2011-1 1-15T 15 : 57 : 02 . 313Z" , 

"status": "LAUNCHING", 

"topology" : "https :// 172 . 16.33 . 181 : 9444/storehouse/user/depl oyments/ 
d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/topol ogy. json" 

} 

»> 


Figure 14-7 Deploy a virtual application using the CLI 

When the application is deployed, the instance is given an ID that can be used to access the 
deployed virtual application object. In this example, the ID is: 

d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa 

For example, the following command returns the attributes of the deployed virtual application 
depl oyer. virtual appl i cations.get( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 
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The results of the command are shown in Figure 14-8. Comparing these results with the 
result of the deployment in Figure 14-7 on page 334, the status attribute changed from 
LAUNCHING to RUNNING, indicating that the deployment completed. 


»> depl oyer.vi rtual appl i cations .get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") 

{ 

"acl": (nested object), 

"app_id" : M a-aed67a8c-95c6-47d0-9edl-f329fa559055" , 

M app_type" : "application", 

"appmodel " : " https:// 172. 16.33. 181: 9444/storehouse/user/depl oyments/ 
d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/appmodel . json" , 

"deployment" : "https:// 172. 16.33. 181: 9444/storehouse/user/depl oyments 
/d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/depl oyment . json" , 

"deployment_name" : "SampleAppByCLI Deployment", 

"id": "d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa" , 

"monitoring": (nested object), 

"operations": (nested object), 

"rol e_error" : False, 

"start time": "2011-1 1 -15T15 : 57 : 02 . 313Z" , 

|"status": "RUNNING", ~| 

"topology" : "https :// 172 . 16.33 . 181 : 9444/storehouse/user/depl oyments/ 
d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa/topol ogy. json" 

} 

»> 


Figure 14-8 Query the deployed virtual application using the CLI 


14.3 Cloning a virtual application 

You can clone an existing virtual application by using the following command: 

depl oyer. appl ications.get("a-aed67a8c-95c6-47d0-9edl-f329fa559055") .cl one("SampleA 
ppByCLIClonedTest") 
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This command creates a clone of the SampleAppByCLI application (using the appjd to 
identify it) and name the new application SampleAppByCLICIonedTest (Figure 14-9). You can 
see that a different appjd is allocated to the new application. 


»> deployer.appl i cat ions. get ( M a-aed67a8c-95c6-47d0-9edl-f329fa559055") .cl one ("Sample 
AppByCLICl onedTest") 

{ 

"accessjri ghts 11 : (nested object), 

"acl": (nested object), 

"appjd": M a-7184e9d2-6d8c-4103-bef6-d6e264b7383d", 

"app_name" : "Sampl eAppByCLICl onedTest" , 

"appjype": "application", 

"artifacts": (nested object), 

"content_md5" : "D9B5555E7700CD6681AD88574FF8817C" , 

"content _type" : "appl i cati on/json" , 

" create J;i me" : "201 1- 1 1- 15T15 : 34 : 36Z" , 

"creator": "cbadmin", 

"last_modi tied" : "201 1- 1 1- 15T15 : 34 : 42Z " , 

"last_modi tier" : "cbadmin", 

"patterntype" : "webapp", 

"version": "2.0" 

} 

»> 


Figure 14-9 Clone an existing virtual application using the CLI 


14.4 Downloading an application model compressed file 

The following command saves an application model file to your local system: 

depl oyer. appl i cat ions. get ( M a-7184e9d2-6d8c-4103-bef6-d6e264b7383d") .download("D:\\ 
Sampl eAppByCLICl onedTest .zi p") 

In this example, the application model file of the SampleAppByCLICIonedTest application is 
downloaded and saved to D:\SampleAppByCLIClonedTest.zip. 


14.5 Deleting a virtual application 

You can delete a virtual application by running the following command: 

depl oyer. appl i cations. del ete("a-7184e9d2-6d8c-4103-bef6-d6e264b7383d") 

This command deletes the virtual application with the specified appjd. 

You can also enter the command in the following format and get the same result: 
depl oyer. appl i cati ons .get ( M a-7184e9d2-6d8c-4103-bef6-d6e264b7383d") .del ete() 
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14.6 Managing virtual application instances 


After the virtual application is deployed to IBM Workload Deployer, you can maintain it from 
the CLI. This section demonstrates how to perform the following actions. This series of 
actions is typical of a maintenance sequence: 

► Checking the status of a virtual application instance 

► Checking the status of the virtual machines 

► Switching a virtual application instance to maintenance mode 

► Stopping a virtual machine 

► Refreshing the status of a virtual application 

► Starting a virtual machine 

► Resuming a virtual application instance from maintenance mode 


14.6.1 Checking the status of a virtual application instance 

The following command queries the attributes of a virtual application instance. It uses the 
unique deployment ID to identify the instance. 

depl oyer. virtual appl i cat ions. get ( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) 

The results of this command are shown in Figure 14-10. 


»> depl oyer. vi rtualappl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 

{ 

"acl": (nested object), 

"appjd": M a-aed67a8c-95c6-47d0-9edl-f329fa559055\ 

M app_type": "application", 

"appmodel " : " https:// 172. 16.33. 181: 9444/storehouse/user/depl oyments/d-4fbdef93-5bl0 
-4399-al73-laba6ef2ddfa/appmodel . json" , 

"deployment" : " https:// 172. 16.33. 181 : 9444/storehouse/user/depl oyments/d-4fbdef93- 
5b 10-4399-al73-laba6ef2ddf a/deployment. json" , 

"deployment_name" : "SampleAppByCLI Deployment", 

"id": M d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa" , 

"monitoring": (nested object), 

"operations": (nested object), 

"rol e_error" : False, 

"start_time": "2011-1 1-15T15 : 57 : 02 . 313Z" , 

[status" : "RUNNING", | 

’topology" : 11 https:// 1/2. 16.33. 181: 9444/storehouse/user/depl oyments/d-4fbdef93-5bl0 
-4399-al73-laba6ef2ddf a/topology . json" 

} 


Figure 14-10 Check the status of a deployed virtual application instance 

In this example, the status attribute is RUNNING. You can check this specific attribute by 
running the following command: 

depl oyer. vi rtual appl i cat ions. get ( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) .status 
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14.6.2 Checking the status of the virtual machines 


You can check the status of the virtual machines that host this virtual application instance by 
running the following command: 

depl oyer. virtual appl i cat ions. get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 

. vmi nstances () . i nstances 

In the results shown in Figure 14-1 1 , the status of both virtual machines is RUNNING. For a 
detailed explanation of virtual machine status, see Table 8-1 on page 223 


»> depl oyer.vi rtual appl i cations .get ( M d-4f bdef 93-5bl0-4399-al73- Iaba6ef2ddfa 11 ) .vmi n 
stances() .instances 
[{ 

"id": "appl ication-was. 11321372622318", 

"1 ast_update" : "201 1- 1 1- 15T16 : 02 : 10. 131Z" , 

"logging": (nested object), 

"master": True, 

"name": "appl ication-was. 11321372622318", 

"privatejp": "172.16.39.230", 

"publicjp": "172.16.39.230", 

"reboot_count" : 0, 

"roles": (nested object), 

"start_time" : "2011-1 1-15T15 : 57 : 26 . 368Z" , 

"status": "RUNNING", 

"vmld" : 12, 

"volumes": (nested object) 

}, { 

"id": "database-db2. 11321372622328", 

"1 ast_update" : "201 1- 1 1- 15T16 : 02 : 10. 131Z" , 

"logging": (nested object), 

"name" : "database-db2 .11321372622328" , 

"privatejp": "172.16.39.229", 

"publicjp": "172.16.39.229", 

"reboot_count" : 0, 

"roles": (nested object), 

"start Jime": "2011-11-15T15:57:26.685Z" , 

"status": "RUNNING", 

"vmld": 13, 

"volumes": (nested object) 

}] 

»> 


Figure 14-11 Check the virtual machine status using the CLI 


14.6.3 Switching a virtual application instance to maintenance mode 

When a virtual application instance is in maintenance mode, you can stop and start the virtual 
machines without activating the scaling policies. Run the following command to switch a 
virtual application instance into maintenance mode. 

depl oyer. virtual appl i cat ions. get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") 
.maintain() 
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Figure 14-12 shows the command and the results. The return value True indicates that the 
switch was successful. 


»> deployer.vi rtualappl ications.get( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") .main 
tain() 

True 

»> 


Figure 14-12 Switch the virtual application instance to maintenance mode 


14.6.4 Stopping a virtual machine 

The following command stops a virtual machine. It uses the virtual machine ID to specify the 
machine to stop. In this example, the virtual machine that hosts the database is stopped. 

deployer.vi rtualappl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 
.stopvm("database-db2. 11321372622328") 

14.6.5 Refreshing the status of a virtual application 

Stopping a virtual machine takes down the node. In the previous example, the database 
virtual machine is stopped. Because the virtual application was switched to maintenance 
mode before being taken down, no scaling policy was activated, so the virtual application 
instance is out of service due to an outage of the database service. 

The following commands are used to refresh the status of the virtual application. The first 
command refreshes the cached attribute values of the virtual application. The second 
command queries the virtual machines to reflect the change of the status. 

► depl oyer. virtual appl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 
.refresh() 

► depl oyer. virtual appl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 
.vminstances() .instances 
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The results of these commands, shown in Figure 14-13, show that the status of the virtual 
application instance has changed to ERROR and the status of the database virtual machine is 
changed to STOPPED. 


»> deployer. vi rtual appl i cations .get ( M d-4f bdef 93-5bl0-4399-al73- Iaba6ef2ddfa 11 ) .ref re 
sh() 

{ 

"acl": (nested object), 

" app_i d 11 : M a-aed67a8c-95c6-47d0-9edl-f329fa559055 M , 

M app_type M : "application", 

"appmodel " : " https:// 172. 16.33. 181: 9444/storehouse/user/depl oyments/d-4fbdef93-5bl0 
-4399-al73-laba6ef2ddfa/appmodel . json" , 

"depl oyment" : " https:// 172. 16.33. 181 : 9444/storehouse/user/depl oyments/d-4fbdef93 
-5bl0-4399-al73-laba6ef2ddf a/deployment . json" , 

"depl oyment_name" : "SampleAppByCLI Deployment", 

"id": "d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa" , 

"operations": (nested object), 

"role_error" : False, 

"start_time" : "2011-1 1-15T15 : 57 : 02 . 313Z" , 

"status": "ERROR", 

"topology" : " https:// 172. 16.33. 181: 9444/storehouse/user/depl oyment s/d-4fbdef93-5bl0 
-4399-a 173- Iaba6ef2ddf a/topology . json" 

} 

»> depl oyer. vi rtual appl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") .vminst 
ances() .instances 
[{ 

"id": "appl ication-was. 11321372622318", 

"1 ast_update" : "2011- 11- 15T16 : 02 : 10. 131Z" , 

"logging": (nested object), 

"master": True, 

"name" : "appl i cati on-was .11321372622318" , 

"privatejp": "172.16.39.230", 

"publicjp": "172.16.39.230", 

"reboot_count" : 0, 

"roles": (nested object), 

"start_time" : "2011-1 1-15T15 : 57 : 26 . 368Z" , 

"status": "RUNNING", 

"vmld" : 12, 

"volumes": (nested object) 

}, { 

"id": "database-db2. 11321372622328", 

"1 ast_update" : "2011-11-15T22:20:58.272Z" , 

"logging": (nested object), 

"name" : "database-db2 .11321372622328" , 

"privatejp": "172.16.39.229", 

"publicjp": "172.16.39.229", 

"reboot_count" : 0, 

"start Jime": "2011-11-15T15:57:26.685Z" , 

"status": "STOPPED", 

"vmld": 13, 

"volumes": (nested object) 

}] 

»> 


Figure 14-13 Refresh status of the virtual application using the CLI 
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14.6.6 Starting a virtual machine 


The following command is used to start a virtual machine. In this example, the virtual machine 
hosting the database is started. 

depl oyer. vi rtual appl i cat ions. get ("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 

. start vm("database-db2. 11321372622328") 

Query the status of the virtual machine until you see it change to Running (see 14.6.2, 
“Checking the status of the virtual machines” on page 338). 


14.6.7 Resuming a virtual application instance from maintenance mode 

The following command resumes the virtual application instance from maintenance mode: 

depl oyer. virtual appl i cat ions. get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 

. resume () 

Figure 14-14 shows the command and the results (True). 


»> depl oyer. vi rtual appl ications.get( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") .resum e() 
True 
»»» 


Figure 14-14 Resume a virtual application instance from maintenance mode 


14.7 Monitoring a virtual application 

The following command can be used to monitor the metrics data of a virtual machine: 

depl oyer. virtual appl i cat ions. get ( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) .monitor 
ing. servers [0] .getMetricsQ 

The command returns the current metrics for the virtual machine (Figure 14-15). 


»> depl oyer.vi rtual appl i cations .get ( M d-4f bdef 93-5bl0-4399-al73- Iaba6ef2ddfa 11 ) .moni to 
ri ng. servers [0] .getMetrics () 

{'NETWORK 1 : { 1 time_stamp 1 : 1321462157665L, 'megabytes_recei ved_per_sec 1 : 0.001, 
'megabytes_transmi tted_per_sec 1 : 0.001}, 'DISK 1 : { ' time_stamp ' : 1321462157665L, 
'blocks_reads_per_second' : 0L, 'blocks_written_per_second' : 6077L}, 'MEMORY': 

{ ' time_stamp ' : 1321462158651 L, 'memory_used_percent ' : 9.0, 'memory_total ' : 2399L}, 
'CPU': { ' time_stamp ' : 132 1462 1 5865 1 L , 'busy_cpu': 2.32}} 

»> 


Figure 14-15 Monitor virtual machine metrics data 

If there are multiple virtual machines for the virtual application, you can monitor each of them 
with the same command but specifying a different server index (servers [0] ) . 

The following command can be used to monitor the metrics data for the middleware. The 
command uses the roles parameter to specify the middleware to retrieve data from. 

depl oyer.vi rtual appl i cat ions. get ( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) .monitor 
ing.roles[l] .getMetri cs () 
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This command returns WebSphere Application Server metrics data (Figure 14-16). 


»> depl oyer.vi rtual appl i cations .get ( "d-4fbdef93-5bl0-4399-al73- Iaba6ef2ddf a") .moni to 
ri ng.rol es [1] .getMetrics() 

{ 1 WAS_JVMRimtime' : { 1 time_stamp 1 : 132 1462093667 L , 1 jvm_heap_used 1 : 74.952965, 

1 usedjnemory 1 : 114744L, 1 heap_s i ze 1 : 153088L}, 1 WAS_Transacti onManager 1 : { 1 time_stamp 1 : 
132 1462093667 L , 1 commi tted_count 1 : 12L, 1 rol 1 edback_count 1 : 0L, 1 acti ve_count 1 : 0L}, 

1 WAS_JDBCConnectionPool s 1 : { 'mi n_wai t_time 1 : 0L, 1 time_stamp 1 : 132 1462093667 L , 
'wait_time': OL, 'max_percent_used 1 : OL, 'mi n_percent_used 1 : OL, ' percent_used ' : OL, 
'max_wai t_time' : OL}, 'WAS_WebAppli cations' : { 'mi n_servi ce_time ' : OL, 'service_time' : 

OL, ' time_stamp ' : 1321462093667L, ' request_count ' : OL, 'max 
_service_time' : OL}} 

»> 

Figure 14-16 Monitor WebSphere Application Server metrics data 

In this example, roles[l] specifies WebSphere Application Server. The following command 
is run to find which role object is WebSphere Application Server: 

depl oyer.vi rtual appl i cat ions. get ( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) 
.monitoring. roles 


14.8 Downloading middleware log files 

The following command lists the logs available for download from a virtual machine: 

depl oyer. virtual appl i cat ions. get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") 
.vminstances() .instances[0] . logging. getLogs() 
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In this example, the virtual machine hosts WebSphere Application Server, so the logs for 
WebSphere Application Server are listed in the return message (Figure 14-17). 

»> deployer.vi rtualappl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") . vminstances () 

. i nstances [0] . 1 oggi ng .getLogs () 

{ 1 IWD Agent 1 : [ '/opt/IBM/maestro/agent/usr/servers/appl ication-was. 11321372622318/logs/trace. log. 4 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/trace.l og.5 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/ffdc. log. O' , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/trace.l og. 2 1 , 
'/opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 1132 13726223 18/logs/trace. log. 1 1 , 
'/opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 1132 13726223 18/logs/ins tal 1 /trace. log 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cati on-was .11321372622318/1 ogs/i ns tal 1 /consol e. 1 og 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 1132 13726223 18/logs/trace. log. O' , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cati on-was .11321372622318/1 ogs/appl i cati on- 
was. 1132 13726223 18. MON I TORI NG/ trace, log 1 , 

'/opt/IBM/maestro/agent/usr/servers/appl ication-was. 11321372622318/1 ogs/appl ication-was. 1132 13726223 18. M 
ONITORING/console.log 1 , 

'/opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 1132 13726223 18/logs/console. log. O' 9 
1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/trace.l og. 8' , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/trace.l og. 7 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/appl i cati on-was. 1132 13726223 18. S 
SH/trace.log 1 , 

'/opt/IBM/maestro/agent/usr/servers/appl ication-was. 11321372622318/1 ogs/appl ication-was. 1132 13726223 18. S 
SH/console.log 1 , '/opt/IBM/maestro/agent/usr/servers/appl ication-was. 1132 13726223 18/1 ogs/trace.l og. 6' 9 
1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/appl i cati on-was. 1132 13726223 18. W 
AS/trace .log 1 , 1 /opt/IBM/maestro/agent/usr/servers/appl i cati on-was .11321372622318/1 ogs/appl i cati on-w 
as . 11321372622318. WAS/consol e. 1 og 1 , 

'/opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 1132 13726223 18/logs/trace. log. 3 1 , 
'/opt/IBM/maestro/agent/usr/servers/appl ication-was. 11321372622318/1 ogs/appl ication-was. 1132 13726223 18. A 
GENT/trace.log 1 , 

1 /opt/IBM/maestro/agent/usr/servers/appl i cat ion-was. 11321372622318/1 ogs/appl i cati on-was. 1132 13726223 18. A 
GENT/console.log 1 9 1 /Oconf i g/Oconf i g . 1 og 1 ] 9 'WAS 1 : 

[ 1 /opt/IBM/WebSphere/AppServer/profi 1 es/AppSrv01/l ogs/serverl/nati ve_stderr . 1 og 1 9 1 /opt/IBM/WebSphere/App 
Server/prof i 1 es/AppSrv01/l ogs/serverl/SystemOut .log 1 , 

1 /opt/IBM/WebSphere/AppServer/profi 1 es/AppSrv01/l ogs/serverl/SystemErr . 1 og 1 , 

1 /opt/IBM/WebSphere/AppServer/profi 1 es/AppSrvO 1/1 ogs/serverl/nati ve_stdout .log 1 , 

1 /opt/IBM/WebSphere/AppServer/prof i 1 es/AppSrv01/l ogs/ffdc/serverl_excepti on . 1 og 1 , 

1 /opt/ IBM/WebSphere/AppServer/prof i les/AppSrv01/logs/ffdc/serverl_le8db31f_ll . 11. 15_16. 14.59.29340938927 
35162140204.txt 1 , 

1 /opt/ 1 BM/WebSphere/AppServer/prof i les/AppSrv01/l ogs/f fdc/f fdc.9151162873764429136.txt 1 , 

1 /opt/IBM/WebSphere/AppServer/profi 1 es/AppSrv01/l ogs/ffdc/FfdcSummary . txt 1 , 

'/opt/ I BM/WebSphere/AppServer/prof i les/AppSrv01/l ogs/f fdc/f fdc. 608987 13 15269192617. txt '] , 'OS': 

[ ' /var/1 og/dmesg ' , ' /var/1 og/mai 1 1 og ' , ' /var/1 og/secure ' , '/var/log/boot.log ' , ' /var/log/brcm-iscsi .log' , 
'/var/log/spooler ' , ' /var/1 og/messages ' , ' /var/1 og/yum. 1 og ' , ' /var/1 og/cron ' , 

' /var/1 og/acpi d ' , ' /var/1 og/wtmp ' ] } 

»> 

Figure 14-17 List all available logs for downloading 

The following commands are used to download a log file to your local system: 

► vm=depl oyer. vi rtualappl i cations. get ("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 
.vmi nstances () . i nstances [0] 

► vm. 1 oggi ng.downl oad( "/opt/ I BM/WebSphere/AppServer/prof i 1 es/AppSrv01/logs/ 
server 1/System0ut . 1 og" , "D:\SystemOut .log") 

The first command returns the virtual machine object. The second command downloads the 
log file for the virtual machine object to the local system by specifying the source and target 
path names of the log file. 
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14.9 Adding, updating, and removing the SSH public key 


The following commands are used to set the SSH public key for a virtual machine: 

► newop={ "rol e" : "SSH" , "type" : "setVMSSHKey" , "parameters" :{ "publ icKey" : "ssh-rsa 
AAAAB3NzaClyc2EAAAADAQABAAABAQCZMVqXNugPLfbRlSU9wNRTJiFS7PinDs3uDfs0pCLI2UQlWnT 
QQCKZkZU4bYYgKQSiMzTKHQ2VS+pfCNFlZe3GMuoQKlHJDkobE4djL6h4d2JkLA04vxBxSKp05JP6BF 
GYAfBWWyxqScqf+0pIKUDHyuZsNxdquDJTsxIoLVWdNEta4U4cl7gnKw/qrB9C8IM9xvkAekNUhIPbS 
T f 61 s6uIYBWwegMZjEPyMSRwy0k0b2gLGYrSCV5TSlgTq0NUeSJ86sp5Gs0h4hhyMcjZMtGJTXBFQVY 
gGQaYgZhfH397hQkW7+ZxYw+b/IuyVuGlTwtTvV27CLD5QLwX4qna5/7 auto generated key"}} 

► depl oyer. vi rtual appl i cations. get ( M d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") .operat 
ions.create(newop) 

The first command creates the operation object newop. The type is set to setVMSSHKey, and 
the publicKey parameter is set to the string of your SSH public key. 

The second command submits the request for the new operation to the virtual 
application instance. 

The SSH public key is updated to all virtual machines that host the virtual 
application instance. 

The results are shown in Figure 14-18. 


»> newop={"role":"SSH", "type" : "setVMSSHKey" , "parameters" :{ "publ icKey" : "ssh-rsa 
AAAAB3NzaClyc2EAAAADAQABAAABAQCZMVqXNugPLfbRlSU9wNRTJiFS7PinDs3uDfs0pCLI2UQlWnTQQCKZkZU4 
bYYgKQSiMzTKHQ2VS+pfCNFlZe3GMuoQKlHJDkobE4dj L6h4d2JkLA04vxBxSKp05JP6BFGYAfBWWyxqScqf+0pI 
KUDHyuZsNxdquDJTsxIoLVWdNEta4U4cl7gnKw/qrB9C8IM9xvkAekNUhIPbSTf61 s6uIYBWwegMZjEPyMSRwy0k 
0b2gLGYrSCV5TSlgTq0NUeSJ86sp5Gs0h4hhyMcjZMtGJTXBFQVYgGQaYgZhfH397hQkW7+ZxYw+b/IuyVuGlTwt 
TvV27CLD5QLwX4qna5/7 auto generated key"}} 

»> depl oyer. virtual appl i cat ions. get ("d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") .opera 
t ions. create (newop) 

{ 

"operationjd": M o-lb798966-77fe-4bad-8e41-826f2dcd7f65" , 

"parameters": (nested object) , 

"result": (nested object), 

"role": "SSH", 

"virtualapplication": (nested object) 

} 

»> 


Figure 14-18 Update the virtual machine SSH public key using the CLI 

The following commands are used to remove the SSH public key from a virtual machine: 

► newop={ "role": "SSH", "type" : "removeVMSSHKeys" , "parameters":!}} 

► depl oyer.vi rtual appl ications.get("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") .operat 
ions.create(newop) 
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The first command creates the operation object newop, and sets the type to 
remove VMSSHKeys. The second command submits the request to the virtual application 
instance. All SSH public keys are removed from all virtual machines that host this virtual 
application instance. The results are shown in Figure 14-19. 


»> newop={"role":"SSH", "type" : "removeVMSSHKeys" , "parameters" :{} } 

»> depl oyer. virtualappli cat ions. get ("d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") .opera 
tions. create (newop) 

{ 

"operationjd": "o-c2225dfe-a2b3-4545-b306-5ce6b8034aa4" , 

"parameters": (nested object), 

"result": (nested object), 

"role": "SSH", 

"virtualapplication": (nested object) 

} 

»> 


Figure 14-19 Remove the virtual machine SSH public key using the CLI 


14.10 Terminating and deleting a virtual application instance 

After a virtual application instance is terminated, you cannot start or recover it. A new 
deployment is required to use the application again. The following command terminates a 
virtual application instance. This command destroys all virtual machines that host 
this application. 

depl oyer. vi rtual appl i cations. termi nate("d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa") 

Figure 14-20 shows the results of the operation. The return value True means that the 
operation was successful. 


»> depl oyer. vi rtual appl i cat ions. termi nate("d-4fbdef93-5bl0-4399-al73-laba6ef2ddf a") 

True 

»> 

Figure 14-20 Terminate the virtual application instance using the CLI 
The following command deletes the virtual application instance: 

depl oyer. vi rtual appl i cat ions. del ete( l, d-4fbdef93-5bl0-4399-al73-laba6ef2ddfa M ) 
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Part 4 


Troubleshooting 


This part introduces techniques for resolving problems you might encounter when using IBM 
Image Construction and Composition Tool and IBM Workload Deployer. 

This part contains one chapter: 

► Chapter 15, “Troubleshooting” on page 349 
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Troubleshooting 


This chapter provides guidance about diagnosing and resolving issues that might arise while 
working with IBM Workload Deployer and IBM Image Construction and Composition Tool. 
Most of these issues are a result of incorrect usage and are things that we encountered. In 
addition, the chapter talks about collecting diagnostic data, most likely in response to a 
request from IBM Support. Additional troubleshooting tips can be found in the IBM Workload 
Deployer Information Center at the following address: 

http : //publ i b . boul der . i bm. com/i nfocenter/worl odep/v3rlm0/topi c/com. i bm. worl odep. do 
c/ts/tst_troubl e_overvi ew. html 

This chapter contains the following topics: 

► Troubleshooting IBM Image Construction and Composition Tool 

► Troubleshooting virtual applications 
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15.1 Troubleshooting IBM Image Construction and 
Composition Tool 


This section focuses on resolving issues that might arise during the usage of IBM Image 
Construction and Composition Tool to customize images for use with IBM Workload Deployer 
virtual systems. The advice in this section is meant to help you determine if you are 
experiencing a user error, and if not, how to collect information that must go to IBM Support. 


15.1.1 Collecting IBM Image Construction and Composition Tool logs 

To access the IBM Image Construction and Composition Tool log files, click the Download 
logs link on the Welcome window. You can download a compressed file containing the most 
recent trace.log and error.log files. 


IBM Image Construction and Composition Tools 


Welcome 




Administer 


stack by composing software bundles. 


Build and Manage Software Bundles 

Software bundles are building blocks for image ci 
Make your software product available for cloud e 


Configure and administrate the tool 

Manage cloud providers 

Specify where to deploy a virtual machine for im; 
construction. 





Change password 

Change application password. 


Download loc 

Download logV/rom the server. 


Figure 15-1 Download logs link on the Welcome window 

You can also access the log files by clicking Administer Download logs. 


IBM Image Construction and Composition Tools 

Welcome Images 


Download logs r , f 
IBM image ConstructiO and C 
virtual images. 

Figure 15-2 Download logs link 
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You can also view the logs directly on the IBM Image Construction and Composition Tool 
server by opening the following directories: 

► For the trace.log file, open: 

/drouter/ramdisk2/mnt/raid-vol ume/raidO/1 ogs/trace/ 

► For the error. 1 og file, open: 

/drouter/ramdisk2/mnt/raid-vol ume/raidO/1 ogs/error/ 


15.1.2 Resolving issues in IBM Image Construction and Composition Tool 

In this section, we describe typical issues that might arise when using IBM Image 
Construction and Composition Tool with IBM Workload Deployer. 

Problem: Cannot install IBM Image Construction and Composition Tool 

The IBM Installation Manager comes with IBM Image Construction and Composition Tool. 
IBM Installation Manager is installed first, and then used to install IBM Image Construction 
and Composition Tool. 

If the installation of IBM Image Construction and Composition Tool fails (Figure 15-3), check 
the IBM Installation Manager logs in the /var/i bm/Instal 1 at i onManager/1 ogs directory. 

You should see messages indicating the problem. For example, if port 443 is being used by 
another program, the installation fails because IBM Image Construction and Composition 
Tool requires port 443. 



Figure 15-3 Installation failed 
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The logs are XML files and can be viewed in raw format, or you can view them from IBM 
Installation Manager in GUI mode. The GUI mode can be started by running 
instal lation_mgr_root/ecl ipse/launcher. For example: 

/opt/IBM/Instal lationManager/ecl ipse/1 auncher 
The Installation Manager interface is shown in Figure 15-4. 



Figure 15-4 IBM Installation Manager 
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Click File View log to see a formatted version of the logs (Figure 15-5). 



Figure 15-5 Log viewer of IBM Installation Manager 

Problem: Cannot start the IBM Image Construction and Composition 
Tool process 

Figure 15-6 shows the start command for IBM Image Construction and Composition Tool 
and a message indicating that the start failed. 


# /opt/IBM/icon/start.sh 

CWPZC8028E: An unknown ZSO error occurred. 

Launching of the ZSO failed with return code -1 
CWPZT0601E: Error: Command start failed 
Done start. sh 

Figure 15-6 IBM Image Construction and Composition Tool failed to start with return code 1 

Verify that port 443 is not already in use by other software. You can check if the port is being 
used by running the following command: 

netstat -anp |grep 443 

The result of the command (Figure 15-7) shows that the httpd process is using port 443. Stop 
the httpd process and start IBM Image Construction and Composition Tool. 


# netstat -anp Igrep 443 


tcp 0 0: : : 443 :::* LISTEN 

7667/httpd 


Figure 15-7 The httpd process is using port 443 
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If the port is not the problem, the following logs might have more information: 

► /var/log/message 

► The error.log in the /drouter/ramdisk2/mnt/raid-volume/raid0/logs/error/ directory 

Problem: Forgotten password forlBM Image Construction and 
Composition Tool 

If you forget the user name or password, you cannot reset them. Be sure to store the user 
name and password in a password storage facility. 

Problem: Cannot register IBM Workload Deployer as the cloud provider 

If you attempt to register IBM Workload Deployer as a cloud provider and get the error shown 
in Figure 15-8, see the IBM Image Construction and Composition Tool error.log. 



Figure 15-8 500 error 

You should see an error similar to the following exception in the error log: 

Cl oudProvi der E com. i bm. cl oud. i cn. cl oudprovi der .Cl oudProvi der 
getCloudProviderlmplementation Unable to configure cloud 
provi der .java . 1 ang . ref 1 ect . Invocati onTarget Except i on 

If you see this error, there are two possible resolutions: 

► Check the network communication with IBM Workload Deployer. 

If there is no response code recorded in the log, something is wrong with the network 
connection. IBM Image Construction and Composition Tool tries to communicate with IBM 
Workload Deployer using port 443. Test the network connection by running ping or 
traceroute to verify the connection. Make sure that firewalls do not block port 443. 

► Verify the credentials used to access IBM Workload Deployer. 

Verify the user credential information used in the cloud provider definition, especially if you 
see the following errors: 

- Cl ientRestHel I com. ibm. cloud. icn. core. rest. Cl ientRestHel per 
executeRequestlnternal Response code = 401 

- Cl ientRestHel I com. ibm. cloud. icn. core. rest. Cl ientRestHel per 
executeRequestlnternal Message= Unauthorized 

When either the user name or password is incorrect, IBM Image Construction and 
Composition Tool cannot access IBM Workload Deployer. 


354 


IBM Workload Deployer: Pattern-based Application and Middleware Deployments in a Private Cloud 



Problem: Cannot delete the entry to register IBM Workload Deployer 
again 

To change the user credentials used to access IBM Workload Deployer, delete the cloud 
provider and register it again. To complete this task, delete all images for the cloud provider 
first. If you do not delete all the images first, the error shown in Figure 15-9 occurs. 



Figure 15-9 Cannot delete cloud provider 


Problem: The Import icon on the Build Images page is not activated 

Make sure that you select the correct cloud provider from the drop-down menu in the console 
(Figure 15-10). 



Figure 15-10 Select the correct cloud provider 
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Problem: No images are available for import from IBM Workload 
Deployer 

If the image catalog from IBM Workload Deployer is not displayed in the left pane during an 
import (Figure 15-11), check the IBM Image Construction and Composition Tool error log. 



Figure 15-11 Images are not shown 

Look for the following error: 

IWDCloudProvi E com. ibm. cloud. icn.cloudprovider.iwd. IWDCloudProviderTmpl 
getCLoudBaselmages Unable to retrieve images from iwd. 

If you see this error, there are two possible resolutions: 

► Check the user credentials used to access IBM Workload Deployer. 

If you see the following message in the error log, verify that the credentials defined in the 
cloud provider match the credentials in IBM Workload Deployer. The mismatch sometimes 
happens when you change the password. 

- com. ibm. cloud. icn. core. rest. ClientRestHelper executeRequestlnternal Response 
code = 401 

- Cl ientRestHel I com. ibm. cloud. icn. core. rest. ClientRestHelper 
executeRequestlnternal Message= Unauthorized 

If the user credentials are incorrect, delete the cloud provider and register it again. 

► Check the network communication with IBM Workload Deployer. 

If you cannot find the above Exception with HTTP response code 401 but find a message 
that indicates a connection timeout, something is wrong with the network connection. Test 
the network connection by running ping or traceroute and make sure port 443 is not 
blocked by a firewall. 
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Problem: Cannot find the image you want to import from IBM Workload 
Deployer 

IBM Image Construction and Composition Tool shows the Virtual Images Catalog from IBM 
Workload Deployer. However, if you cannot find the image you want to import, log on to the 
IBM Workload Deployer user interface as a user with at least the Cloud Administrator (Read) 
role and verify the following items: 

► Ensure that the License agreement for the image is accepted. 

Open the Virtual Image Catalog window on IBM Workload Deployer, select the image you 
want to import, and check the License agreement check box. If the license agreement is 
not accepted, the image cannot be shown. 

► Make sure that the user is granted access to the image. 

If the Administrator is not granted the user ID access to the image, IBM Image 
Construction and Composition Tool cannot see it unless the user has the Cloud 
administration role. Log on to IBM Workload Deployer as the Administrator, open the 
Virtual Images Catalog window, select the image, and add the user name to the Access 
granted to field (Figure 15-12). 


Access granted to: 

Administrator [owner] 


icctuser [read] [remove] 


Add more... 


Figure 15- 12 Grant icctuser to access the image 


Problem: Cannot import the image 

If you find the image to import but experience the failure shown in Figure 15-13, look for errors 
in the IBM Image Construction and Composition Tool error.log file. 



Figure 15-13 500 error 

If you find the following exception, verify that the user has the Create new patterns role in IBM 
Workload Deployer: 

java.io.IOException: Server returned HTTP response code: 403 for URL: 
https ://<hostname>/resources/patterns 

If you find an exception related to the network connection, such as a connection timeout, 
verify the network connection between IBM Image Construction and Composition Tool and 
IBM Workload Deployer. 

Problem: Cannot import a software bundle from a remote host 

If you cannot import a software bundle into IBM Image Construction and Composition Tool, 
ensure that you can access the software bundle manually first. Then check the 
network connection. 
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Problem: Cannot export a software bundle to the remote host 

The destination host must support scp, so make sure you can copy files from the IBM Image 
Construction and Composition Tool server to the target host manually using the scp 
command and using the user credentials you want to use. 

Problem: You cannot find the software bundle when extending an image 

If you cannot find the software bundle you want to add, the software bundle probably does not 
satisfy the system requirements. For example, if you extend an AIX image but the operating 
system requirements of the software bundle are for a Linux system, you cannot add the 
bundle to the image. Open the Bundles window, select the software bundle, and review the 
Supported Operating Systems field under the Requirements tab. 

Problem: Cannot select the cloud group during synchronization 

If the administrator is not granted the user ID connecting to the IBM Workload Deployer 
access to the cloud group, IBM Image Construction and Composition Tool cannot display the 
cloud group for selection. From the Welcome window on IBM Workload Deployer, click 
Cloud -» Cloud Group, select the cloud group, and review the Access granted to field. If 
necessary, add the user to the field. 

Problem: Failure to synchronize 

If an image synchronization fails, determine whether the failure is one of the following 
two types: 

► The virtual instance creation failed. 

► The virtual machine instance was created but synchronization failed. 

If you start the synchronization but IBM Workload Deployer does not create the virtual 
instance, verify the following items: 

► Check whether the IP addresses in the IP group are depleted. 

In IBM Workload Deployer, click Instances -» Virtual systems and click the instance. If 
all of the IP addresses in the IP group are active, IBM Workload Deployer cannot create 
the virtual machine instance and you see a message similar to the one shown in 
Figure 15-14 in the Current status field. Delete unnecessary virtual instances or add IP 
addresses to the IP group. 


ICON cloned vm 1321331932023-1.0.0.2 % X 

Created on: 

Nov 15, 2011 1:33:57 PM 

From pattern: 

ICON cloned vm 1321331932023 1.0. 0.2 

Using E n v i ro n m e nt p rofi 1 e : 

None provided 

Current status: 

Hypervisors with available IPs to fulfill the request 
cannot be found. 


Figure 15-14 Virtual machine instance cannot be created because the IP addresses are depleted 

► Check that the user has permission to create patterns. 

If you see the following exception in the IBM Image Construction and Composition Tool 
error log, ensure that the user has the Create new patterns role in IBM Workload 
Deployer: 

java.io.IOException: Server returned HTTP response code: 403 for URL: 
https : //<hostname>/resources/templ ates 
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► Check the network connection. 


If the request from IBM Image Construction and Composition Tool to create the virtual 
instance cannot reach IBM Workload Deployer, synchronization cannot be started. 

Ensure that the request reached the IBM Workload Deployer and was queued (click 
System -» Task Queue in IBM Workload Deployer to verify this situation). 

If the task is not queued, verify the network connectivity and that port 443 is not blocked 
by firewalls. 

► Check if the virtual image name is longer than 50 characters. 

The virtual image synchronization fails if the name you specified for your image exceeds 
50 characters. 50 characters is the limit for virtual image names. 

If the virtual machine instance was successfully created but synchronization failed, check the 
following items: 

► Determine if the installation script finished with exit code 0. 

The virtual image synchronization fails if you use a script for the bundle installation that 
produces a return code value that is greater than zero. Make sure that the installation 
script is designed to return exit code 0 when it finishes successfully. Then check the result 
of the installation script. 

You can download the result files by completing the following steps: 

a. Click Images Build images in IBM Image Construction and Composition Tool and 
expand the Virtual System field of the image that you were synchronizing. 

b. Click the Download logs link or icon (Figure 15-15). 


▼ Virtual System: 


Virtual System ID: 

3 

Virtual System Status: 

RM01006 

Hostname: 

9.42.171.59 

IP Address: 

9.42.171.59 

Download logs 

% 


Figure 15-15 Click the download log icon 


You receive a compressed file containing the following logs: 

- error.log 

- trace.log 

- err. log 

- out. log 

The err. log and out. log files are the log files for the bundle installation during 
a synchronization. 
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Check the out . 1 og file for the output of the installation script. If you find a message with an 
error, for example, ERROR: step execution failed: ICONXX” (Figure 15-16), your 
installation task failed. Review the err . 1 og file to find the cause of the error. 


[2011-11-16 17:10:29,629] INFO: Created system services for activation. 

EXIT step: activation. Configlcon 
EXIT task: group 
ENTER task: IconTask 

ENTER step: IC0N969631olm5tr48s83kbbi6ecrbl 
This script always returns the exit code 1 

ERROR: step execution failed: IC0N969631olm5tr48s83kbbi6ecrbl 

Figure 15-16 The out. log file shows the failure of the installation tasks 

After resolving the issue, try to extend and synchronize the image again. 

► Check if a timeout error occurred. 

IBM Workload Deployer can take a long time to create a virtual instance. The time varies 
depending on network speed, size of the image, and other factors. An indication of a 
timeout can be seen in the Image status field in IBM Image Construction and Composition 
Tool. 


Image Status: 08 Synchronization Failed 

Unable to connect to virtual machine 

Figure 15-17 Image Status is unable to connect to the virtual machine 

IBM Image Construction and Composition Tool waits 3 hours for the virtual machine 
instance to start and waits 6 hours for the Installation Tasks to finish running. If either 
process exceeds the timeout, the synchronization is considered a failure. 

You might experience this situation when you synchronize a large image for the first time 
because IBM Workload Deployer must transfer the virtual image files to the 
hypervisor cache. 

If you experience this situation, try to extend and synchronize again. If the same issue 
occurs, consider improving the network performance, scale up the capacity of the 
hypervisor resource, change the cloud environment, and so on. 

Problem: Failure to capture an image 

If a capture from IBM Image Construction and Composition Tool for an image in IBM 
Workload Deployer fails, check the IBM Image Construction and Composition Tool error.log 
file for the following items: 

► If you see an HTTP response code 401 (unauthorized) error, verify the credentials of the 
user accessing the cloud provider. 

► Log on to IBM Workload Deployer and ensure that the virtual instance is running. Check 
the network connection. 

► If the request from IBM Image Construction and Composition Tool to create the virtual 
instance cannot reach IBM Workload Deployer, the image capture cannot be started. 
Ensure that there are not any problems with the network connection. 
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Problem: Increase in unnecessary images and patterns 

The virtual images, virtual system patterns, and virtual instances named ICON cloned vm XX 
are created during the synchronization process and are deleted during the capture process. If 
the synchronize or capture process fails, old artifacts can be left behind. Remove them 
manually if necessary. 

Problem: A deployed image is not configured correctly 

If the virtual machine instance is not configured as you intended, review the activation task 
logs in /opt/ 1 BM/AE/AR of the deployed image. This directory includes ovf-env.ar, <Service 
Name>. out, and <Service Name>.e rr, where <Service Name> is what you specified as the 
operation name on the Configuration Tab of the software bundle. 

The ovf-env.ar file has the results of all the tasks that the Activation Engine performed. For 
example, if you specified acti vation.test as the operation name of your activation task, you 
see the execution result shown in Figure 15-18 in ovf-env.ar. If the Execution status is 
Failed, your activation script failed. 


<ProductActi vati on cl ass="acti vati on . test"> 

Execution kind="self" status="Fai 1 ed" status-detail ="Return code: l"/> 

<Log f i 1 e="/opt/ i bm/ ae/AR/act i vati on . test . out"/> 

<Log f i 1 e="/opt/ i bm/ ae/AR/act i vati on . test . err"/> 

<Properti es/> 

</ProductActi vati on> 

Figure 15-18 ovf-env.ar shows execution of activation, task failed 

Review <Service Name >. out (standard out log) and <Service Name >. err (error log) to find 
the cause of the failure. 


15.2 Troubleshooting IBM Workload Deployer 

This section describes issues that might occur while building and deploying patterns with 
IBM Workload Deployer. 

15.2.1 Collecting data for troubleshooting 

Log files can contain important information when problems occur. The log files for IBM 
Workload Deployer are stored on the appliance and can be viewed directly from the 
appliance using the user interface or they can be downloaded to your local file system for 
review. Log on as a user with the Appliance administration role with full or read only 
permissions to complete these steps. 


Chapter 15. Troubleshooting 361 






To access the IBM Workload Deployer log files, click System -» Troubleshooting from the 
Welcome window on the IBM Workload Deployer user interface. The Troubleshooting window 
opens (Figure 15-19). 


IBM Workload Deployer 

Welcome Instances Patterns Catalog Reports 


Troubleshooting on 9.42.170.220 
- Logging 

Kernel Service log file Storehouse log file 
View current error file View current trace file 
Download log files 

±j Configure trace levels 


Figure 15-19 Troubleshooting page 
The links on this page are: 

► Download log files: Download all the log files as a compressed file. 

► View current error file: Monitor the current error. 1 og file on the web browser. Clicking the 
link opens a new browser window with the error log file (Figure 15-20). 


Clear Pause 

[2011-11-14 10:43:41:000 EST] 00050028 RXA E 

com. i bm. t i vo I i . remoteaccess. BaseProtoco I beginSession [3.42.171.55] CTGRI000 1 E 
The application could not establish a connection to 3.42.171.55. 

[2011-11-14 10:43:54:011 EST] 00058058 RXA E 

com. i bm. t i vo I i . remoteaccess. SSHProtoco I beg i nSess i onlmp I [3.42.171.55] CTGRI0001E 
The application could not establish a connection to 3.42.171.55. 

[2011-11-14 10:43:54:012 EST] 00058023 RXA E 

com. i bm. t i vo I i . remoteaccess. BaseProtoco I beginSession [3.42.171.55] CTGRI000 1 E 
The application could not establish a connection to 3.42.171.55. 

[2011-11-14 10:43:53:046 EST] 00056057 RXA E 

com. i bm. t i vo I i . remoteaccess. SSHProtoco I beg i nSess i onlmp I [3.42.171.32] CTGRI000 1 E 
The application could not establish a connection to 3.42.171.32. 

[2011-11-14 10:43:53:047 EST] 00056037 RXA E 

com. i bm. t i vo I i . remoteaccess. BaseProtoco I beginSession [3.42.171.32] CTGRI000 1 E 
The application could not establish a connection to 3.42.171.32. 


Figure 15-20 The error log viewer on the browser 

► View current trace file: Opens a new browser window with the current trace log file. 

► Kernel Service log file: Opens a browser window with the Kernel Service log 
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► Storehouse log file: Opens a browser window with the Storehouse log. 

► Configure trace levels: View or modify the trace levels (Figure 15-21). 


! - Configure trace levels 


\J Default logger 

INFO 

app. resources. health Check 

FINE 

app.scripts.groovy.rainmaker.appliance 

ALL 

a p p . sc ri pts . g ro o vy . ra i n m a ke r. a u d iti n g 

FINEST 

app.scripts.groovy.rainmaker.cloud 

FINER 

a p p . sc ri pts . g ro o vy . ra i n m a ke r.del o re a n 

FINEST 

app. scripts. groovy.rainmaker.instances 

FINEST 


Figure 15-21 Trace level settings 


The option to configure the trace levels is also in this section. A set of default classes and 
trace levels are defined as strings in this section. You can add or delete trace strings, or 
change the trace level of a string. The trace levels provided are based on Java logging 
convention and WebSphere Application Server levels. The trace levels in ascending order of 
severity are: 

► FINEST 

► FINER 

► FINE 

► INFO 

► WARNING 

► SEVERE 

You can also set the trace to OFF to stop the trace. 

The setting can be changed by clicking the trace string and selecting the new trace level in the 
drop-down menu. Click Save to commit the new trace level for the specified trace string 
(Figure 15-22). 


0 Logging 

Kernel Service log file Storehouse log file 
View current error file View current trace file 
UJ, Download log files 


0 Configure trace levels 


Default logger 

INFO 


app. resources. health Check 

FINE 

U 

app. scripts. groovy.rainmaker.appliance 

ALL 

U 

com.ibm.ws. 31 

i INFO ! v 

Save 

m 

zero. network 

OFF 


m 


Add trace setting 


SEVERE 






WARNING 





INFO 





FINE 





FINER 





FINEST 





ALL 




Figure 15-22 Modifying the trace settings 


You can also add a trace string by clicking Add trace setting and entering a valid trace string 
(Figure 15-22). The trace level for a new trace string is set to INFO by default. 
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Click the remove icon (Ixl) next to a trace string to remove that trace string. 


15.2.2 Receiving event notifications 

The mail delivery function on the IBM Workload Deployer is used to reset passwords and 
send event notifications. 

► Reset password 

If an administrator forgets his password or he wants to update it with a new one, the mail 
delivery function sends an email with his new password to the administrator. But if the 
administrator forgets his password, and no other user has the Appliance administrator 
permission, the appliance must be returned to IBM, and all the data on the appliance that 
is not backed up is lost. 

► Mail notification 

The mail function is also responsible for sending event notifications automatically, such as 
the errors that occur when: 

- A virtual system instance is created. 

- A virtual system instance started successfully. 

- A virtual system instance failed to start successfully. 

- A virtual image is exported. 

- A virtual image is imported. 

To use the mail delivery function, a Simple Mail Transfer Protocol (SMTP) server must be 
configured for use with IBM Workload Deployer. 

Complete the following steps: 

1 . Log on as an administrator. 

2. Click System -» Settings. 
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3. Expand Mail Delivery. 

4. Enter the values for the following attributes (Figure 15-23): 
SMTP server: IP address or host name 

Reply-to address: An email address 


Welcome 

Instances 

Patterns 

Catalog 

Reports 

Cloud 

System 


Hardware 

±1 Appliance Identification 
3 Ethernet Interfaces 
3 Domain Name Servers 
+ Date and Time 


3 Mail Delivery 


SMTP server 

172.16.248.9 

Reply-to address 

Use system administrator's address 


+ Backup and Restore 
3 Migration 
3 Firmware 
@ Power 

3 Hardware Capacity 
3 Hardware Temperatures 

3 Outbound Connections 

Figure 15-23 IBM Workload Deployer Mail Delivery setup 

You can receive the following notifications: 

► Deployment started 

Deploying a virtual application pattern generates the email shown in Example 15-1. 

Example 15-1 Deployment started notification 
Subject: 

[Workload Deployer] Deployment started: d-lc7cel79-ea5f-485d-afb7-0bl5896eldc2 
Body: 

Workload Deployer has started deploying your virtual system. You will be 
notified again when the system is ready for use. 

To login to the appliance, please visit 
https://esx-v4-033-181.purescale.raleigh.ibm.com. 


► IP address in use 

The appliance runs ping to verify the available IP addresses in an IP group when you start 
a deployment and look for the next available IP address. If a response is received, an 
email stating that a device is running on that IP even though it is marked as inactive in IBM 
Workload Deployer is generated. 
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The content of the email is shown in Example 15-2. 

Example 15-2 IP address in use notification 
Subject: 

[Workload Deployer] IP addresses in use, but marked inactive 
Body: 

The following IP addresses are marked as inactive but can be pinged in the 
network: 9.42.39.227 9.42.39.228 

To login to the appliance, please visit https://esx-v4.itso.raleigh.ibm.com. 

► Deployment succeeded 

If the deployment succeeds, an email is generated (Example 15-3). 

Example 15-3 Deployment succeeded notification 
Subject: 

[Workload Deployer] Deployment succeeded: d-lc7cel79-ea5f-485d-afb7-0bl5896eldc2 
Body: 

Workload Deployer has completed deployment of your virtual system. All virtual machines 
have been started and are ready for use. 

To login to the appliance, please visit https://esx-v4.itso.raleigh.ibm.com. 

► Deployment failed 

If the deployment fails, an email with the cause of the failure is generated (Example 15-4). 

Example 15-4 Deployment failed notification 
Subject: 

[Workload Deployer] Deployment failed: d-94db7aea-e059-46f5-9dc8-c857f397dbb6 
Body: 

Workload Deployer could not complete deployment of your virtual system due 
to the following error: Virtual machine could not be registered. 


15.2.3 Troubleshooting virtual applications 

Virtual applications are application-centric. The infrastructure and virtual systems that the 
application run on are not immediately apparent to the IBM Workload Deployer administrator. 
This situation can present some challenges when things go wrong. This section provides 
troubleshooting tips for working with virtual applications in IBM Workload Deployer. 
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Status values for a deployed virtual application 

An unexpected status of a virtual machine or of a role in an instance is often the first 
indication of a problem. You can view the status of the virtual machines and the roles of a 
virtual application instance. A role is a unit of functionality that is performed by the virtual 
application middleware on a virtual machine, such as WebSphere Application Server, DB2, 
and so on. For each status, there is an associated icon (Figure 15-24). The status values for 
virtual machines are listed in Table 8-1 on page 223. The status values for roles are listed in 
Table 8-2 on page 224. 


Name 

Public IP 

VM Status 


Started on 

Role Status 

User Registry-tds. 
11320648736180 

172.16.70.27 

Terminated 

□ 

Nov 7, 2011 2:52:26 PM 

TDSADMIN LI 
TDS1 Li 




| Terminated | 




Figure 15-24 IBM Workload Deployer icon 


Using the Log Viewer 

You can view the logs of the virtual application instances in the IBM Workload Deployer user 
interface. The virtual application patterns must be deployed and all of the virtual machines 
must be started. 

To use the Log Viewer, complete the following steps: 

1 . Click Instances -» Virtual Application Instances. The Virtual Application Instances 
palette opens. 

2. Select a virtual application instance, in this example, OSGiEBA. The information about 
the instance is displayed (Figure 15-25). 


- Middleware perspective (2 in total} 

▼ WAS (OSGi_Application-was) y ■ 

Name 


Q SGi_Ap plication - 
was. 11320697458186 


Endpoint 

VM Status 

Running Q Loo 


▼ DB2 (Database-db2) y * Endpoint 

Name VM Status 


Database- 

db2. 11320697458196 


Running y Log 


- Virtual machine perspective (2 in total) 


Role Status 

WAS u 

Role Status 

DB2 y 


Name 

Public IP 

VM Status 

Started on 

Role Status 

Database-db2. 

11320697458196 

172.16.39.225 

Running 

Q * Log 

Nov 7 , 2011 3:24:25 PM 

DB2 

Q Endpoint 

QSGi_ 







Application-was. 

11320697458186 

172.16.39.226 

Running 

y Log 

Nov 7 , 2011 3:24:25 PM 

WAS 

Q Endpoint 


Figure 15-25 IBM Workload Deployer Virtual Application Instance status 
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3. Find the virtual machine or middleware perspective that you want to view the log for, then 
click Log in the VM Status column. The Log Viewer palette (Figure 15-26) opens. The 
viewer organizes the logs by type, for example, operating system log, pattern type plug-in 
log, and agent log. 


IBM Workload Deployer 


LOQ Vi6W6f [ OSGLApplicatiOfl- was.. 11320697458186 (172.16.39.226) ] 


Refresh Download All 



tj tj OSGi_Application-was. 11320697458 186 

- 3 os 

+ E /var/log 

- ft WAS 

- t .../logs/serverl 
SvstemErr.log 
native_stderr.log 
SystemOut.log 
native_stdout.log 
+ □ .../logs/ffdc 

- ft IWD Agent 

+ Q ... /logs/O SGi_Applicati on-was. 1 1320697458 186.AGENT 
+ Q .../OSGi_Application-was. 11320697458186/logs 
El Q .../logs/install 

El □ .../logs/OSGi_Application-was. 11320697458 186. MONITORING 
+ Q .../logs/OSGi_Application-was. 11320697458 186. SSH 
+ □ .../logs/OSGi_Application-was. 11320697458 186. WAS 
+ C /Oconfig 

Figure 15-26 IBM Workload Deployer Log Viewer 

The log files include operating system (OS) logs, middleware logs, and the following IWD 
agent logs: 

- Plug-in logs: Multiple directories for the logs collected in the role’s lifecycle 

- logs/install directory: Agent plug-in installation logs 

- /Oconfig/Oconfig.log: Activator code log 

You can also use the Virtual Application Console to debug problems with virtual applications, 
for example: 

► You can change or fix the SSH certificate (see 13.5.6, “Adding, updating, or removing a 
virtual machine SSH public key” on page 321). 

► You can view the logs for the middleware, operating system, and IWD agent in each 
virtual machine in the deployment (see 13.4, “Viewing the virtual machine logs” on 
page 309) 

► You can set WebSphere Application Server traces strings (see 1 3.5.4, “Collecting trace 
logs for WebSphere Application Server troubleshooting” on page 315). 
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Using SSH to access virtual application instances 

You can access the deployed virtual machines by adding the Secure Shell (SSH) key-based 
access when deploying the virtual application pattern. This access allows you to directly 
access the virtual machine where the application is running. This access can be critical in 
debugging problems on the virtual machine. 

To enable SSH during deployment, complete the following steps: 

1 . Click Patterns Virtual Applications. The Virtual Application Patterns palette opens. 

2. Select the virtual application pattern that you want to deploy. In this example, we select 
OSGiEBA (Figure 15-27). 


IBM Workload Deployer 



A Administrator | © Help | About | Log 

Welcome Instances 

Patterns 

Catalog Reports 

Cloud System 

Virtual Application Patterns ^ 

-_| j 

OSGiEBA 

| ^ Deploy | # Open ^ Export X Deleft 

Name 


ti- 

Application ID: 

a-a4eb0B10-b49a-471d-89b8-cef029a5a70e 

Web Application Pattern Type 2.0 


Description: 

Blank application 

Data Stu d i o Web Co n s o 1! e 4T e st 

□ 

Created by: 

cbadmin 


1 

□ 

Last Modified by: 

cb admin 




Sample Java EE web application 

□ 

Created on: 

Oct 28, 2011 8:52:59 AM 

Sample Web Application Only 

□ 

Last Modified on: 

Oct 31 p 2011 3:44:26 PM 

Secured Java EE web application 

□ 



Tradelite 4-Test 

□ 






Preview: 

\%\ [¥] 


Figure 15-27 IBM Workload Deployer OSGi application pattern review 
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3. Click Deploy (| g^. Deploy |), and the Deploy Virtual Application window opens 
(Figure 15-28). 


Deploy Virtual Application 
Name: 


OSGiEBA 


Select target environment profile: 


Filter by IP type: 

Filter by profile type: 
Profile: 

Cloud group: 

IP group: 

Select target cloud group: 
IP Version: 

Cloud group: 


IPv4 


IPv6 


All 


IPv4 


IPv6 


Default ESX group 


0 


OK 


Cancel 


Figure 15-28 IBM Workload Deployer Deploy Virtual Application 


4. Complete the Target cloud group field. 
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5. If you already have an SSH public and private key pair, use the public SSH key during the 
deployment operation. 

a. Select the Advanced check box to add the SSH protocol key in the SSH Key field 
(Figure 15-29). 


Deploy Virtual Application 
beiecc target ciouo group: 

IP Version: 

Cloud group: 

s/ Advanced 


SSH Key: 


0 


IPv4 


IPv6 


Default ESX group 


Generate 


OK 


Cancel 


Figure 15-29 IBM Workload Deployer SSH key 


b. Enter an SSH public key in the SSH Key field. If you want to use a new SSH public key, 
you can generate one. 


Tip: Be careful when you copy and paste you public key to the box. If you 
accidentally add characters to the key, you are not able to access the virtual 
machine with your private key. 


If you do not have a public and private key pair you want to use, they can be generated 
during the deployment operation by completing the following steps: 

a. Select the Advanced check box. 

b. Click the Generate button to generate the key. The SSH key is automatically 
generated in the SSH Key field. 
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c. Click Click here to download the file containing the private key (Figure 15-30). 


Deploy Virtual Application 
beiecc larger cioua group: 

IP Version: 

Cloud group: 

[E Advanced 


0 

(§ IPv4 IPv6 


Default ESX group 


SSH Key: 


ssh-rsa 

AAAAB 3Nz aC 1 y c 2 E AAAADAQAB AAAB AQC y P c kc W 
7p qiT o 1 5htiA+ 2 YO 3 J2 5E Q3 yul / INwNH2 FnFgT 
ACGicnOXznyK? 0+Z S 1 6 SeBdS i 8 SE fewW iGDE 
AQGgOBNF / X vIXDA/ 9 s qTut. O-se IbuEhF 
/Sgh0wCvzx6uy2 7 

/L 3Mp a + gF 4 ZUBAZL f AuSKdDL f WDKo OxZ Jc Fo 
/ JAzupe 

/ i y 5 Q1 3 w JVMPu9 3N3xUvb 1 9mcinl z gl eL GhXHl 
p; 9qas9uYYr aXhecSSQZPbsia rpeV82KBhMla. v 


Generate 


Click here to download the file containing the private key 


OK 


Cancel 


Figure 15-30 IBM Workload Deployer deploys the SSH private key download 


d. Save the private key file to a secure location. The default name is i d_rsa . txt. 


Private key copy: The system does not keep a copy of the private key, so make 
sure that you download the key and store it in a safe place. Make sure that the 
private key has the correct permissions by running chmod 0400 id_rsa.txt. By 
default, the SSH client does not use a private key file with wide open permission. 


6. Click OK. A message appears at the top of the Virtual Application Builder confirming that 
the virtual application is in the deployment process (Figure 15-31). 


OSGiEBA Deploy i # Open ^ Export X Delete |gll Clone 

(T) Deploying the virtual application 'OSGiEBA'. You can check the status by [x] Close 
clicking here 

Figure 15-31 IBM Workload Deployer deployment status 

You can also add, update, and remove the SSH key for virtual machines after they are 
deployed (see 13.5.6, “Adding, updating, or removing a virtual machine SSH public key” on 
page 321). 


SSH availability: SSH is available for virtual application patterns, but not for database 
patterns or virtual system patterns. 
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Accessing virtual machines with SSH 

After deploying the virtual application pattern, you can use the IP address of the virtual 
machines and the private key to gain access to the application artifacts. To do so, complete 
the following steps: 

1 . To gain access to your virtual machine after deployment, run the following command: 
ssh -i id_rsa.txt vi rtuser@<your_workl oad_i p> 

Or you can use SCP to gain access, for example, by running: 
scp -i id_rsa.txt myfiles.txt 

vi rtuser@<your_workl oad_i p> : / [1 ocati on] /myf i 1 e. txt 

2. Log on to the virtual machine. 

To gain root access, run the following command: 
sudo su - 

Run a command with root access, for example: 
sudo /sbin/ifconfig 

You can view and monitor statistics for your deployed virtual machines now. 

Accessing virtual machines with the hypervisor 

If something goes wrong when deploying a database pattern and the Manage button is 
disabled for the instance (Figure 15-32), you cannot enable SSH to access the virtual 
machine to check log files. You can use the VMware vSphere Client to log on to ESX 
hypervisors, allowing you to access the machine. 

Determine the IP address for the virtual machine by opening the window for the database 
instance (Figure 15-32). 


Welcome 

Instances 

Patterns Catalog 

Reports Cloud Sy 

Mv Databases 

* 

mydb y Start Q Stop 

fcj Destroy X Delete [1 

Search... 

u- 

Database ID: 

d-73cl8536-7ec3-4ec3-825f- 

c074c40bd0ad 

mydb 

1 ^ .. Q: 




Created by: 

cbadmin 



Database Description: 




Host: 

| 9.42.171.55 | 



Port: 




Status: 

Launching 



Historv 

l+l 

The virtual system has been 
deployed and is ready to use 


Figure 15-32 IBM Workload Deployer database instance information 

Log on to the ESX hypervisor with the VMware vSphere Client and locate the virtual machine 
with the same IP address. From there, you can locate log and configuration information for 
the middleware, applications, and so on, and view them to determine the problem. 
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For a PowerVM hypervisor, use the Systems Director Management Console (SDMC), the 
Hardware Management Console (HMC), or the Integrated Virtualization Manager (IVM) on 
entry-level Power Systems to manager the hypervisor. The SDMC is the more up-to-date 
method. For more information about SDMC, see IBM Systems Director Management 
Console: Introduction and Overview, SG24-7860. 

Problem: No virtual application patterns listed and no pattern types are 
available to create a pattern 

When you click Pattern Virtual Applications, you can see the existing virtual application 
patterns. These patterns are grouped by pattern type, which you select at the top of the list 
from the Name drop-down menu. If there are no pattern types to select in the drop-down 
menu (Figure 15-33), then you have not enabled any pattern types. Another indication that 
you need to enable pattern types is when you click the New icon to create a pattern but have 
no pattern types to select. 


IBM Workload Deployer 


Welcome Instances Patterns 

Catalog 

Reports 

Cloud 

Systi 

Virtual Application Patterns 

* 




Name 

U- 





1 T 





Figure 15-33 IBM Workload Deployer Virtual Application Patterns before Enable Pattern type 


Click Cloud -» Pattern Types and verify that you enabled the pattern types you want to use. 
See 8.2.3, “IBM Workload Deployer pattern types” on page 172 for information about enabling 
pattern types. 

After the pattern types are enabled, you see them in the Name drop-down menu. For 
example, in Figure 15-34, Web Application Pattern Type 2.0 is selected and multiple 
patterns of that type are shown. 


IBM Workload Deployer 

Welcome Instances Patterns 

Catalog 

Reports 

Cloud 

Syst 

Virtual Application Patterns 
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Name 

n- 




Web Application Pattern Type 2.0 
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Sample Java EE web application 
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Sample Web Application Only 
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Secured Java EE web application 
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Figure 15-34 IBM Workload Deployer Virtual Application Patterns after Enable Pattern type 
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Problem: No options for the Purpose field for a DB2 component 

When you try to select a value in the Purpose field for a Database DB2 component in the 
Virtual Application Builder, you see an error (Figure 15-35). 


This value is required. 
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Database 


Name: * 
Database 


Database Name: 


mydb 


Database Description: 
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Purpose: 
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▼ Source 
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10 


Name Workload Type 
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DB2 (Default) 


Schema File: 

Browse Delete 


Figure 15-35 IBM Workload Deployer Purpose attribute for a Database DB2 component 
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To correct this error, enable the Online Transaction Processing Applications (OLTP) plug-in 
under the IBM Transactional Database Pattern 1 .1 .0.0 pattern type (see “Enabling the 
database pattern types” on page 179). The options you can select in the Purpose field 
depend on what you enable. In Figure 15-36, both the production and non-production 
environments for the plug-in are enabled, providing the Production and Non-Production 
options in the Purpose field. 


Database 


Name: * 
Database 


Database Name: * 
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Database Description: 


Purpose: 

Production ▼ 

Production 
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Figure 15-36 IBM Workload Deployer Purpose attributes for a Database DB2 component 
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Problem: No cloud groups to deploy to 

When you deploy a pattern, you are asked to specify a cloud group or environment profile. If 
there are no cloud groups, or you do not have permission to access a cloud group (and no 
environment profiles), you are not able to deploy the pattern (Figure 15-37). 



Figure 15-37 IBM Workload Deployer cloud group in deployment 

Click Cloud -» Cloud Groups. Ensure that cloud groups are defined, that there are active 
hypervisors in the cloud group, and that the user ID you are using has at least read 
permission to a cloud group (see 2.3.3, “Creating the cloud groups” on page 39). 

A cloud group must have active hypervisors before you can deploy to the cloud group. If there 
are no active hypervisors, you see the warning “You must start at least one hypervisor to 
create virtual systems” in the Current status field of the cloud group (Figure 15-38). 
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Cloud Groups # ESX Default Group 


Search... 

Description: 
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ESX Default Group & 

Created on: 
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Type: 
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Updated on: 

Nov 10, 2011 2:38:52 PM 


Hypervisor type: 

ESX 


Use linked clones: Enable v 


Figure 15-38 IBM Workload Deployer warning in cloud group 
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Click Cloud Hypervisors. Click the hypervisor you need to start and then click [§ at the 
upper right of the palette to start this hypervisor. 

Problem: The virtual image is not set or has an incorrect value 

If the error shown in Figure 15-39 occurs during deployment, see 8.2.2, “Setting the default 
deployment settings” on page 171 to enable the correct image for your virtual application 
pattern. 


TradeLite & Deploy Open ^ Export X Delete |Tp Clone 

O CWZKS0082E: Deployment failed: Virtual image is not set or has an incorrect [x] Close 
value. Check the cloud specified during deployment or in the Default Deploy 
Settings. 

Figure 15-39 IBM Workload Deployer virtual image not set 

Problem: No images defined during deployment 

If you try to deploy your virtual application pattern, but receive the error shown in 

Figure 15-40, you probably did not accept the virtual image licenses. Click Catalog -» Virtual 

Images, and make sure that the license for the required image is accepted. 


O CWZKS0069E: No images defined. 

Figure 15-40 IBM Workload Deployer virtual image not defined error 

Click Cloud -» Default Deploy settings and verify that the image is listed for the hypervisor 
type you are using. If it is missing, click Add or Change to add the image for the hypervisor 
type (Figure 15-41). Redeploy your virtual application and the problem should be resolved. 



Settings for Default Deploy 


Define the default virtual image for deploying Shared Services and Virtual Applications 


NOTE: Only supports 64-bit Hypervisors and images. 


Hypervisor Type: 


ESX 


Set the default image below: 


Name 

IBM Workload Deployer Image for 
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Version 
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Description 
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Hypervisor Type: 


PowerVM 
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Figure 15-4 1 IBM Workload Deployer Default Deploy setting 
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Problem: Virtual application patterns are taking too long to deploy 

If a virtual application pattern is taking too long to deploy, determine if the extra time is spent 
transferring the virtual images to hypervisors by looking at the History section of the virtual 
application instance. You find timestamped messages that provide a timeline for the transfer 
of the images. 

If the time seems extreme, check your network speed between the IBM Workload Deployer 
and hypervisors or try to place them in to the same network segment. After you deploy a 
pattern, the image used is cached on that hypervisor. Therefore, during the next deployment 
to that hypervisor, the cached image is used without transferring it again. 


Tip: The cached images are saved in the hard disk of the hypervisor. They are not deleted 
even after you reboot the hypervisor. You need to delete them manually if you do not need 
to them anymore. 


If you want to delete a cached image, click Cloud -» Hypervisor and click the hypervisor 
name (Figure 15-42). Click Storage devices. Click the cleanup link next to the device name 
that you would like to clean. 



Figure 15-42 IBM Workload Deployer hypervisor storage devices cleanup 
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Problem: There are no scheduled tasks in the task queue while virtual 
application instances are deploying 

When deploying a pattern, you discover that there are no scheduled tasks shown in the Task 
Queue view (click System -» Task Queue to open this view), even though the instance is still 
deploying. This situation occurs because the deployment of a virtual application includes both 
virtual system creation and role installation. The jobs shown in the task queue are only related 
to the deployment of the virtual system, which means that when the virtual machines are 
running the jobs are gone. Subsequent installation and configuration jobs are listed on the 
task queue. You can monitor the role status by clicking Instances -» Virtual Applications. 


15.2.4 Problem: No output when using the command-line interface 

You can use the CLI to run commands to manage an appliance remotely. However, if your 
system is using multibyte characters, you might run into a problem. 

For example, you connect to the appliance by running the following command: 
deployer -h iwd_host -u iwd_user -p iwd_password 

But when you run the deployer. applications. get command to get a single application with 
appjd, the command does not return any data (Figure 15-43). 


»> depl oyer . appl i cations. get (“a-fcb7e68e-3b48-44cc-a0cl-ede84c5509df”) 

Figure 15-43 IBM Workload Deployer CLI command 

In this case, go to the installation of the command line and browse to 

depl oyer, cl i\l ib\3. 1.0.0-number. Remove # from the following lines in the registry file. 

# python.console.encoding=iso-8859-l 

# depl oyer. consol e.encodi ng=gb2312 

Save the file and run the command again. 
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Sample scripts 


This appendix contains scripts that are referred to in Chapter 4, “Getting started with IBM 
Image Construction and Composition Tool” on page 73, Chapter 7, “Scenario 2: Creating 
images with third-party software” on page 137, and Chapter 12, “Custom plug-ins for virtual 
application patterns” on page 287. 

This appendix contains the following topics: 

► WebSphere Application Server Community Edition scripts 

► Scripts for Apache Tomcat installation 

► Plugin Development Kit Hello Center example 


© Copyright IBM Corp. 2012. All rights reserved 
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WebSphere Application Server Community Edition scripts 


These scripts are used in the examples found in Chapter 4, “Getting started with IBM Image 
Construction and Composition Tool” on page 73. 


installWASCE.sh 

Example A-1 contains the script used in a software bundle to install WebSphere Application 
Server Community Edition. 

Example A- 1 installWASCE.sh 

#!/bin/sh 

# 

# Copyright IBM Corp. 2011 

# A1 1 Rights Reserved 

# This information contains sample code provided in source code form. You may 
copy, modify, and distribute these sample programs in any form without payment to 
IBM for the purposes of developing, using, marketing or distributing application 
programs conforming to the application programming interface for the operating 
platform for which the sample code is written. Notwithstanding anything to the 
contrary, IBM PROVIDES THE SAMPLE SOURCE CODE ON AN "AS IS" BASIS AND IBM 
DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY 
IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS 
FOR A PARTICULAR PURPOSE, TITLE, AND ANY WARRANTY OR CONDITION OF 
NON-INFRINGEMENT. IBM SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR OPERATION OF THE SAMPLE 
SOURCE CODE. IBM HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, 
ENHANCEMENTS OR MODIFICATIONS TO THE SAMPLE SOURCE CODE. 

mkdir /mytest 

mkdir /tmp/wasce 

env > /tmp/wasce/i nstal 1 .env 

N0T_S ET= 11 <N0T_S ET > 11 
WASCE_TAR_URL=$NOT_SET 

WASCE_TAR_NAME=wasce_i bm60sdk_setup-2 . 1 . 1 . 5-i a321 i nux . tar . bz2 
JAVA_RPM_NAME=i bm-java-i 386-sd k-6 . 0-9 . 0 . i 386. rpm 
INSTALLED_JAVA_HOME=/opt/i bm/ j ava- i 386-60 
WASCE_TAR_URL_USER=$NOT_SET 
WASCE_TAR_URL_PASSWORD=$NOT_SET 
WASCE_INSTALL_EXEC=wasce_setup-2. 1 . 1.5-uni x.bi n 


while [ $# -ne 0 ] 
do 

case $1 in 

-WASCE_INSTALL_PATH*) 

WASCE_INSTALL_PATH=$2 

9 9 

- TARJJRL*) 
WASCE_TAR_URL=$2 

9 9 

-TAR_NAME*) 

WASCE_TAR_NAME=$2 
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-INSTALL_EXEC*) 

WASCE_INSTALL_EXEC=$2 

9 9 

-URL_USERID*) 

WASCE_TAR_URL_USER=$2 

9 9 

-URL_PASSWORD*) 

WASCE_TAR_URL_PASSW0RD=$2 

9 9 

-JAVA_RPM_NAME*) 

JAVA_RPM_NAME=$2 

9 9 

-JAVA_INSTALLED_HOME*) 

INSTALLED_JAVA_H0ME=$2 


*) 

9 9 

esac 

shift 1; shift 1 


done 

echo "WASCE_INSTALL_PATH is set to: $WASCE_INSTALL_PATH" 

echo "TAR_URL is set to: $WASCE_TAR_URL" 

echo "TAR_NAME is set to: $WASCE_TAR_NAME" 

echo " INSTALL_EXEC is set to: $WASCE_INSTALL_EXEC" 

echo "URL_USERID is set to: $WASCE_TAR_URL_USER" 

echo "URL_PASSWORD is set to: $WASCE_TAR_URL_PASSWORD" 

echo "JAVA_RPM_NAME is set to: $JAVA_RPM_NAME" » $1 ogfi 1 e 

echo "JAVA_INSTALLED_HOME is set to: $ I NSTALLED_J AVA_H0ME " 


#Write the install path to a file so configuration script can share value 
echo "$WASCE_INSTALL_PATH" » /tmp/wasce/wasce_instal l_path 

# Write the install path to a properties file we will use for silent install 
echo "USER_INSTALL_DIR=$WASCE_INSTALL_PATH" » /tmp/wasce/instal 1 .props 

cd /tmp/wasce 

# Retrieve the WebSphere Application Server Community Edition binaries and untar 
if [ $WASCE_TAR_URL_PASSWORD = $N0T_SET ] 

then 

echo "wget $WASCE_TAR_URL" 
wget $WASCE_TAR_URL 
el se 

echo "wget —user $WASCE_TAR_URL_USER —password $WASCE_TAR_URL_PASSWORD 
--no-check-certi fi cate $WASCE_TAR_URL" 

wget —user $WASCE_TAR_URL_USER —password $WASCE_TAR_URL_PASSWORD 
--no-check-certi fi cate $WASCE_TAR_URL 
fi 


if [ $? -eq 0 ] 
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then 

echo "WGET binary '$WASCE_TAR_URL' successful" 
el se 

echo "WGET binary ' $WASCE_TAR_URL ' failed!" 
exit 100 
fi 


echo "tar -xvf $WASCE_TAR_NAME" 
tar -xvf $WASCE_TAR_NAME 
if [ $? -eq 0 ] 
then 

echo "Untar source , $WASCE_TAR_NAME I successful" 
el se 

echo "Untar source 1 $WASCE_TAR_NAME' failed!" 

exit 200 
fi 


# If the package contains a Java RPM, install it 
if [ "X$JAVA_RPM_NAME" != "X" ] ; then 

echo "rpm -ivh $JAVA_RPM_NAME" 
rpm -ivh $JAVA_RPM_NAME 
el se 

echo "Java already installed" 
fi 

# Make sure Java is in the path for installation 
export PATH=$PATH:$INSTALLED_JAVA_HOME/bi n 
chmod 777 $WASCE_INSTALL_EXEC 

# Initiate the silent installation fo WebSphere Application Server Community 
Edition 

cat ./ i nstal 1 .props 

echo " . /$WASCE_INSTALL_EXEC -i silent -f ./i nstal 1 .props" 

. /$WASCE_INSTALL_EXEC -i silent -f ./i nstal 1 .props 
cd . ./ 

# Remove the temporary directory 
#rm -rf /tmp/wasce 

exit 0 


ConfigWASCE.sh 

Example A-2 contains the script used in a software bundle to configure and start a 
WebSphere Application Server Community Edition server. 

Example A-2 ConfigWASCE.sh 
# ! /bi n/bas h 

# Copyright IBM Corp. 2011 
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# A1 1 Rights Reserved 

# This information contains sample code provided in source code form. You may 
copy, modify, and distribute these sample programs in any form without payment to 
IBM for the purposes of developing, using, marketing or distributing application 
programs conforming to the application programming interface for the operating 
platform for which the sample code is written. Notwithstanding anything to the 
contrary, IBM PROVIDES THE SAMPLE SOURCE CODE ON AN "AS IS" BASIS AND IBM 
DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY 
IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS 
FOR A PARTICULAR PURPOSE, TITLE, AND ANY WARRANTY OR CONDITION OF 
NON-INFRINGEMENT. IBM SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR OPERATION OF THE SAMPLE 
SOURCE CODE. IBM HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, 
ENHANCEMENTS OR MODIFICATIONS TO THE SAMPLE SOURCE CODE. 

HOSTNAME=" hostname -T 

echo "Configuring WAS CE with host $HOSTNAME" 

if [ ! -n $HOSTNAME ] 

then 

HOSTNAME='cat /etc/HOSTNAME' 
fi 


#WASCE_HOME=/opt/IBM/WebSphere/AppServerCommuni tyEdi ti on 
num_servers=l 

WASCE_ADMIN_USER="wasceadmi n" 
WASCE_ADMIN_PASSWORD="password" 

while [ $# -ne 0 ] 
do 

case $1 in 

-num_servers*) 

num_servers=$2 

9 9 

-WASCE_HOME*) 

WASCE_H0ME=$2 

9 9 

-WASCE_ADMIN_USER*) 

WASCE_ADMIN_USER=$2 

9 9 

-WASCE_ADMIN_PASSWORD*) 

WASCE_ADMIN_PASSWORD=$2 

9 9 

*) 


esac 

shift 1; shift 1 


done 

#Read WASCE install path from install script breadcrumb 

if [ -f /tmp/wasce/wasce_instal l_path ] 

then 

WASCE_HOME=$ (echo /tmp/wasce/i nstal l_path) 
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svr ct=l 


sed -i s/ M EndPoi ntURI=http.* M / "EndPoi ntURI=http\\\: \/\/$H0STNAME\\\ : 8080 " /g 

$WASCE_HOME/var/conf i g/conf i g-substi tuti ons . properti es 

sed -i s/ l, ServerHostname=0.0.0.0 l 7 ll ServerHostname=$H0STNAME l 7g 

$WASCE_HOME/var/conf i g/conf i g-substi tuti ons . properti es 

sed -i s/"RemoteDepl oyHostname=l ocal host l 7"RemoteDeployHostname=$H0STNAME l 7g 

$WASCE_HOME/var/conf i g/conf i g-substi tuti ons . properti es 

sed -i 

s/ M system=Simpl e} rOOABXNyABl qYXZheC5jcnl wdG8ull2VhbGVkT2JqZWN0Pj Y9ps03VHACAARbAAll b 
mNvZGVkUGFyYWlzdAACWOJbABBl bmNyeXB0ZWRDb250ZW50cQB+AAFMAAl wYXJhbXNBbGdOABJMamF2YS9 
sYW5nLlN0cml uZztMAAdzZWFsQWxncQB+AAJ4cHBlcgACW0Ks8xf4BghU4AIAAHhwAAAAEHnh03Emi Nu4V 
TuWH+xZi RBwdAADQUVT" / 11 11 /g $WASCE_HOME/var/securi ty/users . properti es 
echo ll $WASCE_ADMIN_USER=$WASCE_ADMIN_PASSWORD 11 » 

$WASCE_HOME/var/securi ty/users . properti es 

sed -i s/"admi n=system l 7"admi n=$WASCE_ADMIN_USER l 7g 

$WASCE_HOME/var/securi ty/groups . properti es 

$WASCE_H0ME/bi n/startup . sh 

echo "Configuring $num_servers server instance(s) 11 

while [ $svr_ct -It $num_servers ] 
do 

let svr_ct++ 

i nstName="i nstance"$svr_ct 

echo "Creating $instName instance" 

mkdir $WASCE_H0ME/$i nstName 

cp -r $WASCE_H0ME/var $WASCE_H0ME/$i nstName 

let y=$svr_ct-l 

sed -i s/"Port0ffset=0 l 7"Port0ffset=$y l 7g 
$WASCE_H0ME/$i nstName/var/conf i g/conf i g-substi tuti ons . properti es 
GERON IM0_0PTS=-Dorg. apache. geroni mo. server. name=$i nstName 
export GER0NIM0_0PTS=$GER0NIM0_0PTS 
$WASCE_H0ME/bi n/geronimo. sh start 
echo "Started $i nstName instance" 

done 


Scripts for Apache Tomcat installation 

These scripts are used in Chapter 7, “Scenario 2: Creating images with third-party software” 
on page 137. 


install.sh 

This script (Example A-3) installs the Apache Tomcat binary files. 

Example A-3 install.sh 

# ! /bi n/bash 

# 

# Copyright IBM Corp. 2011 
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# A1 1 Rights Reserved 

# This information contains sample code provided in source code form. You may 
copy, modify, and distribute these sample programs in any form without payment to 
IBM for the purposes of developing, using, marketing or distributing application 
programs conforming to the application programming interface for the operating 
platform for which the sample code is written. Notwithstanding anything to the 
contrary, IBM PROVIDES THE SAMPLE SOURCE CODE ON AN "AS IS" BASIS AND IBM 
DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY 
IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS 
FOR A PARTICULAR PURPOSE, TITLE, AND ANY WARRANTY OR CONDITION OF 
NON-INFRINGEMENT. IBM SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR OPERATION OF THE SAMPLE 
SOURCE CODE. IBM HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, 
ENHANCEMENTS OR MODIFICATIONS TO THE SAMPLE SOURCE CODE. 

# 

# 


HOSTNAME=" hostname -T 

echo 11 Installing Tomcat with host $HOSTNAME" 

if [ ! $HOSTNAME ] 

then 

HOSTNAME='cat /etc/HOSTNAME' 
fi 


WORK_DIR="pwd" 


while [ $# -ne 0 ] 
do 

case $1 in 
-JDK_PATH*) 

JDK_PATH=$2 

echo 11 JDK_PATH=$JDK_PATH" 

9 9 

-JDK_FILE*) 

JDK_FILE=$2 

echo "JDK_FILE=$JDK_FILE" 

9 9 

-TOM_PATH*) 

T0M_PATH=$2 

echo $TOM_PATH 

echo "TOM_PATH=$TOM_PATH" 

9 9 

-TOM_FILE*) 

TOM_FILE=$2 

echo $TOM_FILE 

echo "TOM_FILE=$TOM_FILE" 

9 9 

-RUNAS_USER*) 

RUNAS_USER=$2 

echo "RUNAS_USER=$RUNAS_USER" 


*) 


esac 

shift 1; shift 1 
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done 


# Check parameters 
if [ "X" == "X$JDK_PATH" ] ;then 
JDK_PATH=/usr/java 
echo "JDK_PATH=$JDK_PATH" 
fi 

if [ "X" == "X$JDK_FILE" ] ;then 

JDK_FILE=i bm-java-sdk-6.0-9.2-1 i nux-x86_64.bi n 
echo "JDK_FILE=$JDK_FILE" 
fi 

if [ "X" == "X$T0M_PATH" ] ;then 
TOM_PATH=/home/ tomcat 
echo "TOM_PATH=$TOM_PATH" 
fi 

if [ "X" == "X$T0M_FILE" ] ;then 
T0M_FILE=apache-tomcat-7.0.22.zi p 
echo "TOM_FILE=$TOM_FILE" 
fi 

if [ "X" == "X$RUNAS_USER" ] ;then 
RUNAS_USER=TomcatUser 
echo "RUNAS_USER=$RUNAS_USER" 
fi 

#— Install JDK — # 

if [ -e ${W0RK_DIR}/${ JDK_FILE} ] ;then 
chmod +x $ { W0RK_D I R} /$ { J DK_FI LE } 
mkdir -p /opt/ibm 

mv $ { W0RK_D I R} /$ { J DK_FI LE } /opt/ibm/ 
cd /opt/ibm/ 

/opt/i bm/${ JDK_FI LE} -i silent 

if [ $? = 0 ] ;then 
rm -f / opt/i bm/$ { JDK_FI LE} 

JDK_TEMP='ls -d /opt/i bm/ibm*' 

In -s $ { J D K_T EM P } ${JDK_PATH} 
echo "Install JDK: OK" » /opt/result 
else 

echo "Install JDK: NG" » /opt/result 
exit 1 
fi 
fi 

alternatives --display java |grep gcj 
if [ $? != 0 ] ;then 

echo "GCJ: The GNU Compiler for Java is not installed." 
fi 

alternatives --install /usr/bin/java java ${JDK_PATH}/bin/java 2000 \ 
--slave /usr/1 ib/jvm/jre jre $ { JDK_PATH } / j re \ 
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--slave /usr/bin/javaws javaws ${ JDK_PATH}/bi n/javaws \ 

--slave /usr/bin/keytool keytool $ { JDK_PATH} /bi n/keytool \ 

--slave /usr/bin/rmiregistry rmiregistry ${JDK_PATH}/bin/rmiregistry \ 
--slave /usr/1 ib/jvm-exports/jre jre_exports ${JDK_PATH}/bi n/jre 

if [ $? = 0 ] ;then 
echo 1,11 

echo "Setup JDK: OK" » /opt/result 
el se 

echo "Setup JDK: NG" » /opt/result 
exit 1 
fi 

# End of Install JDK 
cd $ { W0RK_D I R} 

#-- Install Tomcat --# 

# Add RunAslIser 

cut -d: -fl /etc/passwd |grep ${RUNAS_USER} 

if [ $? != 0 ] ;then 
/usr/sbin/useradd ${RUNAS_USER} 
fi 

# Verify RunAslIser 
if [ $? = 0 ] ;then 

cut -d: -fl /etc/passwd |grep ${RUNAS_USER} 
if [ $? = 0 ] ;then 

echo "Make RunAslIser: OK" » /opt/result 
el se 

echo "Make RunAslIser: NG" » /opt/result 
exit 1 
fi 

el se 

echo "Make RunAslIser: NG" » /opt/result 
exit 1 
fi 

# Install Tomcat # 

if [ -e $ { W0RK_D I R} /$ { T 0M_F I LE } ] ; then 
mv $ { W0RK_D I R} /$ { T0M_F I LE} / home/$ { RUNAS_US ER} / 
cd /home/$ { RUNAS_USER} / 
unzip /home/${RUNAS_USER} /$ { T0M_FI LE } 

if [ $? = 0 ] ;then 

echo "Tomcat: UNZIP OK" » /opt/result 
el se 

echo "Tomcat: UNZIP NG" » /opt/result 
exit 1 
fi- 
rm -f /home/${RUNAS_USER} /$ { T0M_FI LE } 
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TOM_TEMP="echo ${TOM_FILE} | cut -d. -fl-3" 

In -s /home/${RUNAS_USER} / $ { T OM_T EM P } ${TOM_PATH} 

fi 

# Enable SSL 

cp -p ${TOM_PATH}/conf/server.xml ${TOM_PATH}/conf/server.xml .org 

numl="grep -n '<Connector port= l, 8443" 1 ${TOM_PATH}/conf/server.xml | cut -d: -fl" 

(( numl = numl -1 )) 

sed -e $ { numl } d ${TOM_PATH}/conf/server.xml > ${TOM_PATH}/conf/temp 
num2="grep -n 1 ssl Protocol ="TLS" />' ${TOM_PATH}/conf/temp | cut -d: -fl" 

(( num2 = num2 +1 )) 

sed -e ${num2}d ${TOM_PATH}/conf/temp > ${TOM_PATH}/conf/server.xml 
if [ $? = 0 ] ;then 

echo "Tomcat: SSL setting is completed." » /opt/result 
el se 

echo "Tomcat: SSL setting is incompleted." » /opt/result 
exit 1 
fi 

# Generate SSL key 

sudo -u ${RUNAS_USER} keytool -genkey -dname "CN="hostname -f" 9 0U=IBM Redbooks, 
0=IBM, L=Raleigh, S=North Carolina, C=US" -alias tomcat -keyalg RSA -keypass 
changeit -storepass changeit 

sudo -u ${RUNAS_USER} keytool -list -alias tomcat -storepass changeit 
if [ $? = 0 ] ;then 

echo "Getnerate SSL Certificate: OK" » /opt/result 
el se 

echo "Getnerate SSL Certificate: NG" » /opt/result 
exit 1 
fi 

# Change Owner 

chown -R $ { RUNASJJSER} : $ { RUNASJJSER} ${T0M_PATH} 

chown -R $ { RUNAS_USER} : $ { RUNASJJSER} /home/$ { RUNAS_USER} /$ { T0M_TEMP} 

chmod 744 ${T0M_PATH} /bi n/*. sh 

# Edit .bash_profi 1 e of RunAs User 

echo "export JRE_H0ME=${ JDK_PATH} " » /home/${RUNAS_USER}/.bash_profile 
echo "export CATALINA_HOME=${TOM_PATH} " » /home/${RUNAS_USER}/.bash_profi 1 e 

if [ $? = 0 ] ;then 

echo "Install Tomcat: OK" » /opt/result 
el se 

echo "Install Tomcat: NG" » /opt/result 
exit 1 
fi 

# Restart firewall 
#/etc/rc.d/i ni t . d/i ptabl es restart 
#i ptabl es -P OUTPUT ACCEPT 

#i ptabl es-save > /etc/sysconfig/iptables 
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startup.sh 


This script (Example A-4) starts Apache Tomcat. 

Example A-4 startup.sh 

# ! /bi n/bash 

# 

# Copyright IBM Corp. 2011 

# A1 1 Rights Reserved 

# This information contains sample code provided in source code form. You may 
copy, modify, and distribute these sample programs in any form without payment to 
IBM for the purposes of developing, using, marketing or distributing application 
programs conforming to the application programming interface for the operating 
platform for which the sample code is written. Notwithstanding anything to the 
contrary, IBM PROVIDES THE SAMPLE SOURCE CODE ON AN "AS IS" BASIS AND IBM 
DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY 
IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS 
FOR A PARTICULAR PURPOSE, TITLE, AND ANY WARRANTY OR CONDITION OF 
NON-INFRINGEMENT. IBM SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR OPERATION OF THE SAMPLE 
SOURCE CODE. IBM HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, 
ENHANCEMENTS OR MODIFICATIONS TO THE SAMPLE SOURCE CODE. 

# 

# 


while [ $# -ne 0 ] 
do 

case $1 in 
-JDK_PATH*) 

JDK_PATH=$2 

echo 11 JDK_PATH=$JDK_PATH" 

9 9 

-T0M_PATH*) 

TOM_PATH=$2 

echo $TOM_PATH 

echo "TOM_PATH=$TOM_PATH" 


*) 


esac 

shift 1; shift 1 

done 

# Check parameters 
if [ "X" == "X$JDK_PATH" ] ;then 
JDK_PATH=/usr/java 
echo "JDK_PATH=$JDK_PATH" 
fi 

if [ "X" == "X$TOM_PATH" ] ;then 
TOM_PATH=/home/ tomcat 
echo "TOM_PATH=$TOM_PATH" 
fi 
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II II 


RUNAS_USER='ls -al ${TOM_PATH} | cut -d 


-f3' 


echo "RunAS User: $ { RUNAS_USER} " » /opt/result 


# Change hostname 

sudo -u ${RUNAS_USER} cp -p ${TOM_PATH}/conf/server.xml 
${TOM_PATH}/conf/server.xml .org 

sudo -u ${RUNAS_USER} sed -e s/1 ocal host/^hostname -fVg 
${TOM_PATH}/conf/server.xml .org > ${TOM_PATH}/conf/server.xml 


# Generate SSL key 

sudo -u ${RUNAS_USER} keytool -list -alias tomcat -storepass changeit 
if [ $? = 0 ] ;then 

echo "Old SSL Certificate: Remain" » /opt/result 

sudo -u ${RUNAS_USER} keytool -delete -alias tomcat -storepass changeit 
fi 

sudo -u ${RUNAS_USER} keytool -genkey -dname "CN="hostname -f\ 0U=IBM Redbooks, 
0=IBM, L=Raleigh, S=North Carolina, C=US" -alias tomcat -keyalg RSA -keypass 
changeit -storepass changeit 

sudo -u ${RUNAS_USER} keytool -list -alias tomcat -storepass changeit 
if [ $? = 0 ] ;then 

echo "Getnerate SSL Certificate: OK" » /opt/result 
el se 

echo "Getnerate SSL Certificate: NG" » /opt/result 
exit 1 
fi 

# Start Tomcat 

J RE_H0ME=$ { J DK_PATH } / j re 
CATALI NA_H0ME=$ { T0M_PATH } 

sudo -u $ { RUNAS_US ER } ${TOM_PATH}/bin/startup.sh 
ps -ef |grep java |grep -v grep 

if [ $? = 0 ] ;then 

echo "START Tomcat: OK" » /opt/result 
el se 

echo "START Tomcat: NG" » /opt/result 
fi 

# Restart firewall 

#mv /opt/i ptabl es /etc/sysconfig/iptables 
#/etc/rc.d/i nit. d/i ptabl es restart 


reset.sh 


This script (Example A-5) performs tasks that clean up the image before capture. 

Example A-5 reset.sh 

#!/bin/bash 

# 
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# Copyright IBM Corp. 2011 

# A1 1 Rights Reserved 

# This information contains sample code provided in source code form. You may 
copy, modify, and distribute these sample programs in any form without payment to 
IBM for the purposes of developing, using, marketing or distributing application 
programs conforming to the application programming interface for the operating 
platform for which the sample code is written. Notwithstanding anything to the 
contrary, IBM PROVIDES THE SAMPLE SOURCE CODE ON AN "AS IS" BASIS AND IBM 
DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY 
IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS 
FOR A PARTICULAR PURPOSE, TITLE, AND ANY WARRANTY OR CONDITION OF 
NON-INFRINGEMENT. IBM SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR OPERATION OF THE SAMPLE 
SOURCE CODE. IBM HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, 
ENHANCEMENTS OR MODIFICATIONS TO THE SAMPLE SOURCE CODE. 

# 

# 

H0STNAME=" hostname -T 
echo "RESET" 
if [ ! $H0STNAME ] 
then 

HOSTNAME='cat /etc/HOSTNAME' 
fi 

while [ $# -ne 0 ] 
do 

case $1 in 
-T0M_PATH*) 

T0M_PATH=$2 

echo "TOM_PATH=$TOM_PATH" 

9 9 

*) 

9 9 

esac 

shift 1; shift 1 

done 

# Check parameters 

if [ "X" == "X$T0M_PATH" ] ;then 
TOM_PATH=/home/ tomcat 
echo "TOM_PATH=$TOM_PATH" 
fi 

RUNAS_USER='ls -al ${T0M_PATH} | cut -d " " -f3' 

#echo "RunAS User: ${RUNAS_USER} " » /opt/result 

# Remove unnecessary files of Apache Tomcat 
rm -f ${TOM_PATH}/conf/temp 

rm -f ${TOM_PATH}/logs/* 

# Remove the temporary SSL certificate 

sudo -u ${RUNAS_USER} keytool -delete -alias tomcat -storepass changeit 
if [ $? = 0 ] ;then 
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echo "Delete SSL Certificate: OK" » /opt/result 
el se 

echo "Delete SSL Certificate: NG" » /opt/result 
fi 


#i ptabl es-save > /opt/i ptabl es 
if [ $? = 0 ] ;then 

echo "Copy Firewall Setting: OK" » /opt/result 
el se 

echo "Copy Firewall Setting: NG" » /opt/result 
fi 


Plugin Development Kit Hello Center example 

This section contains the contents of the scripts in the Hello Center example described in 
Chapter 12, “Custom plug-ins for virtual application patterns” on page 287. 


HCenter plug-in scripts 

The HCenter plug-in contains the scripts shown in Example A-6 through Example A-9 on 
page 396. 

Example A-6 Install. py 

# 

# * =================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

# * =================================================================== 

# 

import maestro 

# Prepare (chmod +x, dos2unix) and copy scripts to the agent scriptdir 
maestro. i nstal 1 _scri pts (' scri pts ') 


Example A-7 Configure. py 

# 

# * =================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

# * =================================================================== 
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# 

import maestro 
import json 
import os 
import sys 
import logging; 
import subprocess 

PORT = 4000; 

#import the hcenter utils module. 

hcscri ptspath = os. path. join (maestro. node ['scriptdir'] , 'HCenter') ; 
if not hcscri ptspath in sys. path: 
sys .path. append (hcscri ptspath) 

from hcenterutils import sendCmd 

logger = logging. getLoggerC'HCenter/configure.py") 


installdir = maestro. node[ 1 parts '] ['HCenter'] ['installDir'] 

#start the server and open the port in firewall for Hello Center; 
subprocess . Popen( [os .path, joi n (i nstal 1 di r, "start. sh")] ) ; 

maestro . f i rewal 1 . open_tcpi n (src= 1 pri vate 1 , dport=str (PORT) ) ; 


tmpdir = maestro.role['tmpdir'] 

userfile = maestro. parms['User_File'] 

userfi 1 e_name = userfile. rspl it(os.sep) [-1] 

userfi 1 e_path = os. path. join(tmpdir,userfile_name) ; 

logger. debug( 'downloading the user registry file for hello center') 

maes tro. down 1 oad (userfi 1 e, userfi 1 e_path) 

with open(userfile_path, ' r ' ) as f: 
userlist = json.load(f) ; 

logger. debug("Configuring Hello Center Server"); 
logger. info("The registered user list: %s" % userlist); 
sendCmd("config=%s" % json.dumps(userl i s t ) ) ; 
logger. debug("Completed to configure hello center server"); 

#export the paramters for the hello plugin. 

maestro.export['Center_IP'] = maestro. node [' instance'] ['private-ip'] ; 


Example A-8 Start.py 

# 

#*=================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 
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#* 

#*================================================================== 

# 

import os, sys; 
import maestro; 
import logging; 

logger = logging. getLogger("HCenter/start.py") 

#import the hcenter utils module. 

hcscri ptspath = os. path. join (maestro. node ['scriptdir'] , 'HCenter') ; 
if not hcscri ptspath in sys.path: 
sys .path. append (hcscri ptspath) 

from hcenterutils import sendCmd 

logger. debug("Starting Hello center to accept the client requests"); 
sendCmd("start") ; 

logger. debug("Hel lo Center has entered Running mode"); 
maestro. role status = 'RUNNING' 


Example A-9 Stop.py 

# 

#*=================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

#*=================================================================== 

# 

import os, sys; 
import maestro; 
import logging; 

logger = logging. getLogger("HCenter/stop.py") 

#import the hcenter utils module. 

hcscri ptspath = os. path. join (maestro. node ['scriptdir'] , 'HCenter') ; 
if not hcscriptspath in sys.path: 
sys. path. append (hcscri ptspath) 

from hcenterutils import sendCmd 

logger. debug("Stopping Hello center"); 
sendCmd("stop") ; 

logger. debug("Hel lo center has been stopped"); 
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Hello plug-in scripts 


The Hello plug-in contains the scripts shown in Example A-1 0 and Example A-1 1 . 

Example A-10 Configure.py 

# 

#*=================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

#*=================================================================== 

# 

import maestro 
import logging; 
import gettext; 
import os; 

logger = logging. getLoggerC'Hello/configure.py") 
sender = maestro. parms["Hel lo_Sender M ] ; 

logger. debug("The sender name of greeting message is %s" % sender); 


Example A-1 1 Start. py 

# 

#*=================================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 

#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

#*=================================================================== 

# 

import maestro 

maestro. role status = 'RUNNING' 


HCIink plug-in scripts 

The HCIink plug-in contains the script shown in Example A-1 2. 

Example A-1 2 Changed. py 

# 

# * =========================================================== 

#* 

#* Licensed Materials - Property of IBM 
#* IBM Workload Deployer (7199-72X) 

#* Copyright IBM Corporation 2009, 2011. All Rights Reserved. 
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#* US Government Users Restricted Rights - Use, duplication or disclosure 
#* restricted by GSA ADP Schedule Contract with IBM Corp. 

#* 

# * =================================================================== 

# 

import os 
import maestro 
import socket 
import logging 
import gettext 

logger = logging. getLogger("Hel lo/HCenter/changed.py") 

gettext. install ( 1 HC1 i nk_mes sages 1 , os. pat h. join (maestro. node ['scriptdir'] , 'locale') 
, unicode=True) ; 

PORT = 4000; 

#The initial value, which will be replaced by the actual hello center ip address. 
HOST = ' local host ' ; 

def sendCmd(cmd) : 

global PORT, HOST; 

# create a socket 

sck = socket. socket (socket. AF_INET, socket. S0CK_STREAM) 

# server port 
port = int(PORT) 

# connect to server 
sck.connect((HOST, port)) 

sck.send(cmd) 

resp = sck.recv(lOOO) ; 

sck.close() ; 

return resp; 


deps = maestro. deps 
added = maestro. added 
parms = maestro. parms; 
xparms = maestro. xparms; 

inst_id = xparms [' inst_id'] 

if len (added) > 1: 

logger. debug( ' Error: Supports one Hello Center; found %d ' %(1 en (added) ) ) ; 

sys.exit(l) 

el if len(added) == 1: 
myrole = added [0] 

logger. debugC Linking to Hello Center based on added role %s'%myrole); 
HOST = deps [myrole] [ ' Center_I P ' ] ; 
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sender = parms["Hel lo_Sender M ] ; 
receiver = xparms[ l, HC_Receiver M ] 

maestro.fi rewal 1 .open_tcpout (dest=H0ST, dport=str(PORT)) ; 

request = "{V'senderV iV^sV, \"receiver\" :\"%s\"} 11 % (sender, receiver); 

logger. info(_("Send the request to get a greeting message from %s to %s") % 
(sender, receiver)) ; 

message = sendCmd(request) ; 

logger. info(_("Receive the meesage from hello center: %s") % message); 
el se: 

logger. debug( 1 No Hello Center role added 1 ); 
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Related publications 


The publications listed in this section are considered suitable for a more detailed discussion 
of the topics covered in this book. 

IBM Redbooks 

The following IBM Redbooks publications provide additional information about the topic in this 
document. Some publications referenced in this list might be available in softcopy only. 

► IBM Systems Director Management Console: Introduction and Overview, SG24-7860 

► Oracle to DB2 Conversion Guide: Compatibility Made Easy SG24-7736 

► Virtualization with IBM Workload Deployer: Designing and Deploying Virtual Systems, 
SG24-7967 

You can search for, view, download, or order these documents and other Redbooks, 
Redpapers, Web Docs, draft and additional materials, at the following website: 

ibm.com/redbooks 

Other publications 

These publications are also relevant as further information sources: 

► Chesney, et al., Advanced Java EE Development for Rational Application Developer 7.5: 
Developers' Guidebook, Me Press, 2011, ISBN 1931182310 

Online resources 

These websites are also relevant as further information sources: 

► IBM Data Studio Information Center 

http : //publ ib.boul der.i bm.com/i nfocenter/dstudi o/v3rl/i ndex. jsp 

► IBM DB2 Database for Linux, UNIX, and Windows Information Center 
http: //publ ib.boul der.i bm.com/i nfocenter/db21 uw/v9r7/i ndex. jsp 

► IBM Rational Application Developer Information Center 

http: //publ ib.boul der.i bm.com/i nfocenter/radhel p/v8/i ndex. jsp 

► IBM SmartCloud 

http://www.i bm. com/cl oud-computi ng/us/en/ 

► IBM SmartCloud Enterprise 

http : //www-935. i bm.com/servi ces/us/en/cl oud-enterpri se/ 

► IBM WebSphere Application Server Information Center 

http: //publ ib.boul der.i bm.com/i nfocenter/wasinfo/v8r0/i ndex. jsp 
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► IBM Workload Deployer Information Center 

http : //pub! i b.boul der.i bm.com/infocenter/worl odep/v3rlm0/i ndex. jsp 

► IBM Workload Deployer Library 

http : //www-01 . i bm.com/software/webservers/workl oad-depl oyer/1 i brary/ 

► IBM Workload Deployer System Requirements 

http : //www-01 . i bm.com/software/webservers/workl oad-depl oyer/requi rements/i ndex . 
html 

► IBM Workload Plugin Development Kit 

http ://wwwl4. software. i bm.com/webapp/iwm/web/prel_ogin. do? source=swg-plugindekit 

Help from IBM 

IBM Support and downloads 
ibm.com/support 

IBM Global Services 
ibm.com/servi ces 
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